The updates are signed with a signing key. Thus, a man-in-the-middle doing some redirections to a modified update file won't have any success unless this update got signed with the update signing key, too.
More information about formatting options
Drupal Design and Maintenance by New Eon Media
Drupal Development by Chapter Three