3 ms·

All the more reason to switch to apt-transport-tor with onion services only.

• viraptor 9y ago
  Why? You can't prove who owns an onion service beyond what is advertised on the distribution site. But if you use that, you're relying on their servers and certificate signing. Without onion services, you're still relying on their servers and gpg signing instead. Additionally, once you lose control of your onion service key, it's game over. If you get certificates / gpg compromised, there are well understood ways to both announce the issue and to update the compromised keys.