3 ms·

I don't believe that increases the attack surface. As long as apt supports https repos and redirects: An attacker who wants to exploit a buggy pre-auth (or im

I don't believe that increases the attack surface. As long as apt supports https repos and redirects: An attacker who wants to exploit a buggy pre-auth (or improperly cert-validating) client-side ssl implementation, when the connection is http, can just MITM the http connection and redirect to https.

Klathmon 8y ago
That's a great point, assuming APT follows redirects by default! I don't know enough about it to know either way. I do know that you need to install a package to get HTTPS support for most connections, but I'm not sure if that package is just "switching" to using HTTPS by default or if it actually adds the ability for APT to read HTTPS endpoints.