Hi everyone,
I was busy working on some early draft for a specification and reference implementation of “ethereum signed packages” for the last weeks. We will incorporate package signing in the next version of mist and the accompanying application manager: GitHub - PhilippLgh/electron-app-manager: Electron App Manager provides fast, secure, minimal and continuous updates + version and dependency management
You can find the project repo here and a spec draft here.
You are all welcome to contribute on the issue tracker, with code or suggestions and feedback in this thread 
An EIP is on the way. Unfortunately, I won’t be at EThDenver but I will be at EthCC in Paris and give a short presentation about some of the changes. Would love to hear your input and feedback and have a discussion on how to improve the ecosystem and our application security.
Looking forward to our discussions.