Shifting the updater to work with https as an alternative to latest plaintext http could be very good and easy first step. It can be nice reward if What's more, it checks new exe's signature, but in initial spot, it shouldn't allow for any person on the way to intercept requests so very easily.Also one thing so simple as adding a firewall rule can