Debian does that since forever. Release file also contains Date: Wed, 31 May 2023 14:13:10 UTC Valid-Until: Wed, 07 Jun 2023 14:13:10 UTC which allows

Debian does that since forever. Release file also contains Date: Wed, 31 May 2023 14:13:10 UTC Valid-Until: Wed, 07 Jun 2023 14:13:10 UTC which allows spotting any tries of "downgrading" repository to previous version with potentially insecure packages Of course, you still have to get current time somehow but I guess once RTC is set the device can assume the changes in time won't be huge and just use any kind of https source for that.