Debian security repository canonical URI?

[Daniel Lewart <lewart3@gmail.com>]

Debian Developers,

First, thank you to Ansgar, et al, for changing
<suite>/updates to <suite>-security !

There are a variety of Debian security repository URIs published.
Below are four of them and some authoritative URLs that use them.
This inconsistency is confusing.

Which URI is best?

#2 and #4 are eliminated by the following:
  * Re: Rename security suite to *-security
        https://lists.debian.org/debian-devel/2015/12/msg00333.html
  * #758316 - APT: Use HTTPS by default:
        https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758316

That leaves two candidates for the canonical URI:
  * http://deb.debian.org/debian-security
  * http://security.debian.org/debian-security

Is there consensus as to which one is preferred?

If so, I will try to get the non-canonical URIs changed.

Thank you!
Daniel Lewart
Urbana, Illinois
---
1) http://deb.debian.org/debian-security
        https://wiki.debian.org/SourcesList

2) http://security.debian.org
        https://manpages.debian.org/bullseye/apt/sources.list.5.en.html

3) http://security.debian.org/debian-security
        https://salsa.debian.org/installer-team/apt-setup
        https://wiki.debian.org/DebianBullseye
        https://wiki.debian.org/NewInBullseye
        https://www.debian.org/releases/stable/errata

4) https://deb.debian.org/debian-security
        https://www.debian.org/releases/bullseye/amd64/release-notes/ch-information.en.html#security-archive

###