Switching the updater to use https rather than present-day plaintext http can be very good and simple starting point. It is pleasant bonus if Additionally, it checks new exe's signature, but in initially location, it should not enable any individual on just how to intercept requests so simpl