On the ffWorks website, the download link does not use https (secure connection), just plain old http. Depending on your browser (I use FF), you may get a warning that the download is potentially unsafe. In addition, the company does not provide SHA-256 hash or similar to be able to verify the download (at least that I can see), so at least if they aren't going to use https, you can at least validate the download, especially if you are downloading from another source. They also don't distinguish downloads of different versions, it's always the same filename: ffWorks.dmg, so if I look at this file a month from now, I don't know what version it is unless I open it up. How hard would it be to name the downloads like 'ffWorks_303.dmg' ??