Transforming the updater to utilize https in place of present plaintext http can be superior and easy initial step. It is really great bonus if In addition it checks new exe's signature, but in 1st area, it must not let any one on just how to intercept requests so easily. It seldom worked