Modifying the updater to work with https in place of recent plaintext http will be great and straightforward first step. It is really nice bonus if it also checks new exe's signature, but in initial area, it should not permit any person on how to intercept requests so conveniently. https://https-www-winbox-download29493.webbuzzfeed.com/35762996/login-winbox-for-dummies