[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Debian mirrors and MITM

Alfie John wrote:
> Taking a look at the Debian mirror list, I see none serving over HTTPS:
>   https://www.debian.org/mirror/list

https://mirrors.kernel.org/debian is the only one I know of.

It would be good to have a few more, because there are situations where
debootstrap is used without debian-archive-keyring being available, and
recent versions of debootstrap try to use https in that situation, to at
least get the weak CA level of security.

see shy jo

Attachment: signature.asc
Description: Digital signature

Reply to: