irrelevant, pretty much all reputable sources offer checksums for files they offer to ensure the integrity of the files coming from their hosts as well as signing files to ensure they have not been tampered with. ideally imo the file you upload to your host should be signed and your launcher should verify the signature which ensures that the file was never modified by an attacker at any point in the process. this is "best practice" not "making sure" that your website can't be compromised, that's ridiculous. how can you possibly be 100% confident that there is absolutely no way into whatever system you have hosting your files? you can't. assume the worst. prepare for failure
ideally something with http2 support, either java9 httpclient, okhttp, retrofit, etc and nio for files, its much less error prone, more robust error handling to know when something with your file xfer went wrong
then maybe you shouldn't call it "ANY UNIVERSAL LAUNCHER"






Ryley

















