For example, code signing can protect against an attacker that can swap the application, but not the signing certificate. It can allow retroactive disabling of

For example, code signing can protect against an attacker that can swap the application, but not the signing certificate. It can allow retroactive disabling of a certain application by revoking the cert that signed it. In short: HTTPS ensures the integrity of the download at the time the app is downloaded, code signing at the time it runs.