[BetaCygni]

I don't care for home-brew security, I need something standard.

Also... the firewall at work breaks APT HTTP pipelining. Very very annoying. It would not be able to do so if APT was using HTTPS.

[kiallmacinnes]

The signature method used by Linux mirrors has existed longer than HTTPS has, there's nothing homebrew about it.

[BetaCygni]

I trust the file signatures, but if you need to write a full article arguing something is secure then it can be made more secure by making the system simpler and more standard.

[widforss]

You are going to become very upset when you discover the simplicity of TLS.

[pritambaral]

The apt system is simpler. HTTPS is merely more popular, and breaks existing apt use-cases.

[xorcist]

> It would not be able to do so if APT was using HTTPS.

Oh, you are in for a surprise when you find out what middleboxes really do these days.