§ 5.1.3 in the Release Notes has deb https://deb.debian.org/debian-security bullseye-security main contrib Is the https (rather than http) seen as being better? I've always used http. Cheers, Brian.