In addition to Robert's post below I wrote an article called A Practical Guide to Smartphone Application Security that gives practical advice on signing applications, what needs to be signed, how to set up your tools. You may find this more digestible than the AMO document.

We may also have an opportunity to move some APIs from priv to unpriv or vice versa. I'm interested in your feedback on what APIs you would like to see become unprivileged that are currently privileged and why. What would having the API unprivileged enable your application to do that you can't do today without privileged signing? Why is that so important to your application? I know that the ability to get the unique device ID is important to many developers so perhap that's my start. What else?

[ Author : James P. ]