|
|
|
|
|
by yencabulator
1435 days ago
|
|
> For example, most official Debian[1] and Ubuntu[2] package repositories currently use HTTP (not HTTPS) by default for content retrieval. But then you've bootstrapped the trust somehow. If you were to download an ISO from that not-HTTPS website, you'd be at risk. |
|