Changing the updater to implement https in place of present plaintext http might be excellent and easy starting point. It's great bonus if What's more, it checks new exe's signature, but in first put, it mustn't enable anybody on the way in which to intercept requests so effortle