[xorcist]

> It would not be able to do so if APT was using HTTPS.

Oh, you are in for a surprise when you find out what middleboxes really do these days.