Re: HTTPS enabled Debian Security repository

2017-10-26 Thread Christoph Biedl
林博仁 wrote... > I believe that there's no benefit on accessing Debian archive with HTTPS as > they uses GnuPG for authentication GnuPG indeed serves the purposes of authenticity and integrity very well. Modulo bugs every now and then, but they happen on other layers as well. Also, nobody should r

Re: HTTPS enabled Debian Security repository

2017-10-26 Thread Paul Wise
On Thu, Oct 26, 2017 at 4:43 PM, Marek Sebera wrote: > please advise, is there any repository, that is both official mirror of > security.debian.org and enabled with SSL (HTTPS) access? One of the CDNs backing deb.d.o supports https, see the last para here: http://deb.debian.org/ -- bye, pabs

Re: HTTPS enabled Debian Security repository

2017-10-26 Thread 林博仁
I believe that there's no benefit on accessing Debian archive with HTTPS as they uses GnuPG for authentication 林博仁 2017-10-26 16:43 GMT+08:00 Marek Sebera : > Hi, > > please advise, is there any repository, that is both official mirror of > security.debian.org and enabled with SSL (HTTPS) acce

HTTPS enabled Debian Security repository

2017-10-26 Thread Marek Sebera
Hi, please advise, is there any repository, that is both official mirror of security.debian.org and enabled with SSL (HTTPS) access? Accessing https://security.debian.org/ results in insecure certificate protected domain mirror-conova.debian.org (SHA-1 signed certificate) I've used unofficial mi