Home » Forum » Trisquel users
Inviato da alexvong1995 il Gio, 02/02/2017 - 13:41

Does Trisquel repositories supports HTTPS?

2 risposte [Ultimo contenuto]
Gio, 02/02/2017 - 13:41
alexvong1995
alexvong1995
Offline
Iscritto: 06/19/2016

As we all know, HTTP transfers in plain text, while HTTPS uses encryption.

So, I install 'apt-transport-https' and change all instances of 'http://archive.trisquel.info/trisquel/ foo main' into 'https://archive.trisquel.info/trisquel/ foo main' but it is not working. Does Trisquel repositories supports HTTPS?

In cima
  • +1
    0
    -1
    Please use the rating system to mark posts that go against the Community Guidelines
Gio, 02/02/2017 - 15:00
#1
jxself
jxself
Offline
Iscritto: 09/13/2010

"Does Trisquel repositories supports HTTPS"

Probably not but this is not a problem because of the use of Secure APT, which came out over a decade ago, in which the repository is cryptographically signed and so remains secure even over HTTP.

In cima
  • +1
    0
    -1
    Please use the rating system to mark posts that go against the Community Guidelines
Gio, 02/02/2017 - 21:33
#2
SuperTramp83
SuperTramp83

I am a translator!

Offline
Iscritto: 10/31/2014

Exactly. This is a good answer to a similar question I've read recently.

HTTPS downloads in general provide two things: confidentiality of data transfer, and integrity of
data transfer.

For purposes of integrity, HTTPS apt repositories provide no benefit. Apt release files are already PGP signed by the distribution, so any files forged in transit would be identified and rejected regardless of HTTP or HTTPS.

Without HTTPS, third parties like your ISP can observe which packages you download, however, that has generally been considered to be of little consequence.

In cima
  • +1
    0
    -1
    Please use the rating system to mark posts that go against the Community Guidelines