Don't require app
Improve update mechanism, don't rely on the client sending a time to query attacks