Changing the updater to use https rather than present plaintext http would be very good and easy starting point. It's wonderful bonus if What's more, it checks new exe's signature, but in 1st position, it must not allow any person on how to intercept requests so quickly. forces201