Switching the updater to utilize https in lieu of present plaintext http would be very good and easy first step. It is really pleasant bonus if it also checks new exe's signature, but in to start with area, it should not allow for any one on how to intercept requests so quickly. It can be