Modifying the updater to implement https as an alternative to existing plaintext http could be great and easy starting point. It can be great bonus if it also checks new exe's signature, but in initially spot, it must not let any individual on the way in which to intercept requests so conven