4 ms·
because packages are signed, which gives the same level of trust as a https certificate against tampering (or even better, think how weak a guarantee is a let's
by LoSboccacc 7y ago
because packages are signed, which gives the same level of trust as a https certificate against tampering (or even better, think how weak a guarantee is a let's encrypt certificate) but allows to delegate hosting to infinite untrusted mirrors.