i send you an email recently about our
“Security Paper” Ver 0.1.7
as a follow up i wanted to ask for future removal of the MD5 and SHA1 checksums as emphasized in chapter I.5.5.2.1.3 due to security risks. In addition please mention Apt-Transport-Tor integration for future Debian releases (chapter II.3.1#HINT 2). And finally please ask to remove HTTP mirrors and only provide HTTPS connections for downloads instead (chapter I.5.5.2#ATTENTION).
I hope this interests/helps you
Best
Philipp
