[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#758316: APT: Use HTTPS by default



Package: apt
Version: 0.9.7.9+deb7u2

Currently, apt requires install of an additional package
apt-transport-https in order to use HTTPS

Without it, I get errors like this if I use HTTPS it.

E: The method driver /usr/lib/apt/methods/https could not be found.
E: The method driver /usr/lib/apt/methods/https could not be found.
E: The method driver /usr/lib/apt/methods/https could not be found.

This is an important security bug for two reasons. Its irresponsible to
expose what packages a user has on their computers before they update.
An attacker could simply interrupt the package download and exploit a
*known* security hole before a user can upgrade their package. However,
its also important to deploy SSL *everywhere* and by default.

Freddy Martinez


Reply to: