Switching the updater to utilize https instead of latest plaintext http could well be excellent and simple starting point. It can be pleasant bonus if Additionally, it checks new exe's signature, but in initial place, it shouldn't let anybody on the best way to intercept requests so very easily.one) I like the option to "pin out" the tab in the pop