Re: HTTPS enabled Debian Security repository

[林博仁 <buo.ren.lin@gmail.com>]

I believe that there's no benefit on accessing Debian archive with HTTPS as they uses GnuPG for authentication

林博仁 <Buo.Ren.Lin@gmail.com>

2017-10-26 16:43 GMT+08:00 Marek Sebera <marek.sebera@gmail.com>:

Hi,

please advise, is there any repository, that is both official mirror of
security.debian.org and enabled with SSL (HTTPS) access?

Accessing https://security.debian.org/ results in insecure certificate
protected domain mirror-conova.debian.org (SHA-1 signed certificate)

I've used unofficial mirrors for some time (ie. https://debian.ethz.ch),
but it get harder over time to find one that is at least bit up-to-date
and does provide secure SSL configuration.

also https://security.debian.org/debian-security/ =404
mirror conova does not provide debian security files

and it's IP is the only one in DNS that does accept connections on
443(https) port

;; ANSWER SECTION:
security.debian.org.    3466    IN      A       212.211.132.32
security.debian.org.    3466    IN      A       212.211.132.250
security.debian.org.    3466    IN      A       195.20.242.89
security.debian.org.    3466    IN      A       217.196.149.233

Thank you
Best Regards
Marek Sebera