If you have an update service that's running on a server listening for connections on some random port, how could one verify that any requests coming into that port are from the specific application that I create?
For instance, how does Microsoft know that when Windows checks for an update, it is coming from Windows XP/Vista/7 instead of someone sending it malformed packets?