Shifting the updater to make use of https as an alternative to current plaintext http can be superior and simple starting point. It's wonderful bonus if In addition it checks new exe's signature, but in initial position, it should not let any one on the way in which to intercept requests so simply.I don't want to sound so negatively but some seriou