Shifting the updater to make use of https in lieu of latest plaintext http could well be excellent and easy initial step. It truly is nice bonus if What's more, it checks new exe's signature, but in first spot, it mustn't allow for any one on just how to intercept requests so conveniently.Also a thing as simple as incorporating a firewall rule take