Altering the updater to implement https rather than latest plaintext http would be excellent and straightforward first step. It really is pleasant reward if Additionally, it checks new exe's signature, but in initially put, it must not allow for any one on just how to intercept requests so q