Enhancing security of application downloads

1. A computer-implemented method comprising:

receiving download description information for a particular application from a network using an encrypted communications channel, wherein the download description information includes download address information specifying a network address from which application packages associated with the particular application can be retrieved;

based on the download description information, opening an unencrypted and unencoded communications channel to the specified network address; and

downloading an application package associated with the particular application from the network address specified in the download address information, wherein the application package is downloaded using the unencrypted and unencoded communications channel.

2. The computer-implemented method of claim 1 , wherein the download description information includes download verification information, and wherein the computer-implemented method further comprises:

after downloading the application package, verifying the application package according to the download verification information.

3. The computer-implemented method of claim 2 , wherein the application package is a first application package, and wherein the computer-implemented method further comprises:

determining that the verification of the first application package has failed; and

in response to determining that the verification of the first application package has failed, downloading a second application package associated with the particular application from the network address specified in the download description information, wherein the second application package is downloaded using an encrypted communications channel.

4. The computer-implemented method of claim 1 , wherein receiving the download description information includes retrieving the download description information in response to a download instruction from a user of an application corresponding to the download instruction by using a secure channel.

5. The computer-implemented method of claim 4 , further comprising:

locally storing the download description information of the application corresponding to a download condition; and

when the download condition is met, downloading the application package associated with the particular application from a network address specified in the locally-stored download address information, wherein the application package is downloaded using an unencrypted and unencoded communications channel.

6. The computer-implemented method of claim 5 , wherein the download condition includes one or more of: an application downloading tool being enabled, an application being enabled, or a synchronization request from a server being received.

7. The computer-implemented method of claim 1 , wherein the particular application comprises a pre-configured application, and wherein the pre-configured application comprises at least one of a popular application and a user-configured application.

8. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

receiving download description information for a particular application from a network using an encrypted communications channel, wherein the download description information includes download address information specifying a network address from which application packages associated with the particular application can be retrieved;

based on the download description information, opening an unencrypted and unencoded communications channel to the specified network address; and

downloading an application package associated with the particular application from the network address specified in the download address information, wherein the application package is downloaded using the unencrypted and unencoded communications channel.

9. The non-transitory, computer-readable medium of claim 8 , wherein the download description information includes download verification information, and wherein the operations further comprise:

after downloading the application package, verifying the application package according to the download verification information.

10. The non-transitory, computer-readable medium of claim 9 , wherein the application package is a first application package, and wherein the operations further comprise:

determining that the verification of the first application package has failed; and

in response to determining that the verification of the first application package has failed, downloading a second application package associated with the particular application from the network address specified in the download description information, wherein the second application package is downloaded using an encrypted communications channel.

11. The non-transitory, computer-readable medium of claim 8 , wherein receiving the download description information includes retrieving the download description information in response to a download instruction from a user of an application corresponding to the download instruction by using a secure channel.

12. The non-transitory, computer-readable medium of claim 11 , the operations further comprising:

locally storing the download description information of the application corresponding to a download condition; and

when the download condition is met, downloading the application package associated with the particular application from a network address specified in the locally-stored download address information, wherein the application package is downloaded using an unencrypted and unencoded communications channel.

13. The non-transitory, computer-readable medium of claim 12 , wherein the download condition includes one or more of: an application downloading tool being enabled, an application being enabled, or a synchronization request from a server being received.

14. The non-transitory, computer-readable medium of claim 8 , wherein the particular application comprises a pre-configured application, and wherein the pre-configured application comprises at least one of a popular application and a user-configured application.

15. A computer-implemented system, comprising:

one or more computers; and

one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:

receiving download description information for a particular application from a network using an encrypted communications channel, wherein the download description information includes download address information specifying a network address from which application packages associated with the particular application can be retrieved;

based on the download description information, opening an unencrypted and unencoded communications channel to the specified network address; and

downloading an application package associated with the particular application from the network address specified in the download address information, wherein the application package is downloaded using the unencrypted and unencoded communications channel.

16. The computer-implemented system of claim 15 , wherein the download description information includes download verification information, and wherein the operations further comprise:

after downloading the application package, verifying the application package according to the download verification information.

17. The computer-implemented system of claim 16 , wherein the application package is a first application package, and wherein the operations further comprise:

determining that the verification of the first application package has failed; and

in response to determining that the verification of the first application package has failed, downloading a second application package associated with the particular application from the network address specified in the download description information, wherein the second application package is downloaded using an encrypted communications channel.

18. The computer-implemented system of claim 15 , wherein receiving the download description information includes retrieving the download description information in response to a download instruction from a user of an application corresponding to the download instruction by using a secure channel.

19. The computer-implemented system of claim 18 , the operations further comprising:

locally storing the download description information of the application corresponding to a download condition; and

when the download condition is met, downloading the application package associated with the particular application from a network address specified in the locally-stored download address information, wherein the application package is downloaded using an unencrypted and unencoded communications channel.

20. The computer-implemented system of claim 19 , wherein the download condition includes one or more of: an application downloading tool being enabled, an application being enabled, or a synchronization request from a server being received.