That's a great point, assuming APT follows redirects by default! I don't know enough about it to know either way. I do know that you need to install a package

That's a great point, assuming APT follows redirects by default! I don't know enough about it to know either way. I do know that you need to install a package to get HTTPS support for most connections, but I'm not sure if that package is just "switching" to using HTTPS by default or if it actually adds the ability for APT to read HTTPS endpoints.