- You can go to some 3d party certificate provider (e.g. VeriSign) and purchase a certificate from them (Code Signing At Verisign).
- You use given certificate that has your company name, URL, etc. on it to sign your code.
- I download you app, and look at the list of certificates your app was signed with.
- I use your certificate, go back to VeriSign and verify that the certificate has been indeed issued to MyCompany, LLC.
- I look at the certificates that has been used to issue your certificate, and verify that VeriSign is one of them (Windows comes with few trusted certificates installed).
Summary:
You not only verify that code has not been tinkered with, but also was signed with a certificate that was issued by a party you trust.