steps to reproduce: 1. Upload a http:// app as https://. For example, try uploading https://apps42.dekkostudios.com/seavan-icon.webapp which should actually be http://apps42.dekkostudios.com/seavan-icon.webapp observed behavior: Validation throws no error but app install will fail if the SSL certificate is not respected.

also, the app won't currently launch in the WebRT with a self signed cert. The WebRT is: inapp-pay-test.farmdev.com uses an invalid security certificate. The certificate is not trusted because it is self-signed. (Error code: sec_error_untrusted_issuer)

I don't think this is something we can do. Trusted cert chains are specified for each user (you can modify them in your browser). Maybe you trust the cert and we don't or vice versa. Warnings should happen from WebRT and the platform, but I don't think this is a bug for the marketplace.