Does Trisquel repositories supports HTTPS?
- Inicie sesión ou rexístrese para enviar comentarios
As we all know, HTTP transfers in plain text, while HTTPS uses encryption.
So, I install 'apt-transport-https' and change all instances of 'http://archive.trisquel.info/trisquel/ foo main' into 'https://archive.trisquel.info/trisquel/ foo main' but it is not working. Does Trisquel repositories supports HTTPS?
"Does Trisquel repositories supports HTTPS"
Probably not but this is not a problem because of the use of Secure APT, which came out over a decade ago, in which the repository is cryptographically signed and so remains secure even over HTTP.
I am a translator!
Exactly. This is a good answer to a similar question I've read recently.
HTTPS downloads in general provide two things: confidentiality of data transfer, and integrity of
data transfer.
For purposes of integrity, HTTPS apt repositories provide no benefit. Apt release files are already PGP signed by the distribution, so any files forged in transit would be identified and rejected regardless of HTTP or HTTPS.
Without HTTPS, third parties like your ISP can observe which packages you download, however, that has generally been considered to be of little consequence.
- Inicie sesión ou rexístrese para enviar comentarios