[gnulinux]

With HTTPS a MitM attacker can still refuse to serve a specific package.