Bug#992692: general: Use https for {deb,security}.debian.org by default
Package: general
Severity: wishlist
Dear developers,
As we discussed on -devel(*), it seems that we can enable https for
{deb,security}.debian.org by default. With this bug report, I'll
collect related things and fix it.
- Update mirror list (how?)
- Update security mirror setting in d-i (how?)
- https://www.debian.org/mirror/list.en.html points http""://deb.debian.org,
it should be https.
- deb.debian.org says "deb http://";, it should be "deb https://";
- In release notes, it should be https://security.debian.org, at least
See https://www.debian.org/releases/stable/amd64/release-notes/ch-information.html#security-archive
*) https://lists.debian.org/debian-devel/2021/08/msg00269.html
Reply to: