Shifting the updater to make use of https rather than latest plaintext http would be fantastic and simple first step. It truly is good reward if Furthermore, it checks new exe's signature, but in initial put, it mustn't allow anybody on the best way to intercept requests so quickly... Also tab added - check out opening all choices working with that