[s_q_b]

Yeah, over TLS, and I generally presume that a simple request for a package won't be logged and recorded for posterity.