Who is pi.dk? This isn't using https? If you have a package manager--that has developer signatures for every release and has been checked by multiple others in

Who is pi.dk? This isn't using https? If you have a package manager--that has developer signatures for every release and has been checked by multiple others in the community--when even recommend using this? This is far less secure then running apt-get, yum, or even pacman.