Shifting the updater to work with https in place of latest plaintext http might be superior and simple first step. It truly is pleasant reward if Additionally, it checks new exe's signature, but in first place, it must not allow everyone on the best way to intercept requests so very easily.