Altering the updater to implement https rather than existing plaintext http could be fantastic and straightforward starting point. It truly is pleasant reward if Additionally, it checks new exe's signature, but in to start with position, it shouldn't allow everyone on the way in which to intercept requests so easily.1. Be sure to contain the option