3 ms·
HTTPS adds very little privacy in this context. The mirror IP address is in cleartext. Also, a smart observer might be able to detect APT traffic by analyzing
by debiandev 8y ago
HTTPS adds very little privacy in this context. The mirror IP address is in cleartext.
Also, a smart observer might be able to detect APT traffic by analyzing the timing.
If you want privacy, APT supports Tor and there are mirrors providing onion services:
https://blog.torproject.org/debian-and-tor-services-available-onion-services https://blog.torproject.org/debian-and-tor-services-availabl...
- iheartpotatoes 8y agoI had no idea APT supports Tor, very cool! I don't think the OP knows that either.
- gnulinux 8y agoApt has supported HTTPS and tor since forever. Aws offers https mirror. OP is about defaults. If you want you can switch to https or tor or http.