How you prevent a DNS attack which will download the update from a wrong server? How you prevent that a hacker was break in the download server and has replace the download? Do you use any certificates to prevent this?
Fantastic questions. Yes, wyUpdate signs updates with 2048-bit RSA keys generated the first time you save your project. If the update signature doesn't validate then wyUpdate rejects the update. Read more about the update signing here.