Hi there On 30/10/17 12:24, Russell Coker wrote: <cut>
I agree. There's little downside nowadays. Squid doesn't work particularly well caching APT repositories nowadays (strange timeouts and hangs during downloads) so the caching benefit of non-SSL has mostly gone away.
I have no problems with Squid caching apt repositories.Squid can be made to act as a man in the middle, caching HTTPS, but this incompatible with DANE.