Does Trisquel repositories supports HTTPS?

2 replies [Last post]
alexvong1995
Offline
Joined: 06/19/2016

As we all know, HTTP transfers in plain text, while HTTPS uses encryption.

So, I install 'apt-transport-https' and change all instances of 'http://archive.trisquel.info/trisquel/ foo main' into 'https://archive.trisquel.info/trisquel/ foo main' but it is not working. Does Trisquel repositories supports HTTPS?

jxself
Offline
Joined: 09/13/2010

"Does Trisquel repositories supports HTTPS"

Probably not but this is not a problem because of the use of Secure APT, which came out over a decade ago, in which the repository is cryptographically signed and so remains secure even over HTTP.

SuperTramp83

I am a translator!

Offline
Joined: 10/31/2014

Exactly. This is a good answer to a similar question I've read recently.

HTTPS downloads in general provide two things: confidentiality of data transfer, and integrity of
data transfer.

For purposes of integrity, HTTPS apt repositories provide no benefit. Apt release files are already PGP signed by the distribution, so any files forged in transit would be identified and rejected regardless of HTTP or HTTPS.

Without HTTPS, third parties like your ISP can observe which packages you download, however, that has generally been considered to be of little consequence.