Modifying the updater to work with https as opposed to existing plaintext http will be excellent and simple initial step. It can be awesome bonus if In addition, it checks new exe's signature, but in initially place, it shouldn't allow for any one on the way in which to intercept request