Modifying the updater to make use of https in place of current plaintext http could be good and simple initial step. It is pleasant bonus if it also checks new exe's signature, but in 1st put, it should not enable any one on the way in which to intercept requests so conveniently.Numerous reviews about this, Of course, we know, it truly is the bigge