Right, the ability for an attacker to change an XML file like this could be considered two separate issues.<p>Things like this is why The Update Framework (TUF) Specification was created:<p><a href="https:&#x2F;&#x2F;theupdateframework.github.io&#x2F;" rel="nofollow">https:&#x2F;&#x2F;theupdateframework.github.io&#x2F;</a><p>The specification covers exactly this kind of attack and has signing of all of the data about an update:<p><a href="https:&#x2F;&#x2F;github.com&#x2F;theupdateframework&#x2F;tuf&#x2F;blob&#x2F;develop&#x2F;docs&#x2F;tuf-spec.txt" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;theupdateframework&#x2F;tuf&#x2F;blob&#x2F;develop&#x2F;docs&#x2F;...</a><p>But, as far as I know, there isn&#x27;t an implementation of TUF that works with ObjectiveC and all the other parts of Sparkle, to actually update an OSX application.