Package: apt
Version: 0.9.7.9+deb7u2

Currently, apt requires install of an additional package
apt-transport-https in order to use HTTPS

Without it, I get errors like this if I use HTTPS it.

E: The method driver /usr/lib/apt/methods/https could not be found.
E: The method driver /usr/lib/apt/methods/https could not be found.
E: The method driver /usr/lib/apt/methods/https could not be found.

This is an important security bug for two reasons. Its irresponsible to
expose what packages a user has on their computers before they update.
An attacker could simply interrupt the package download and exploit a
*known* security hole before a user can upgrade their package. However,
its also important to deploy SSL *everywhere* and by default.

Freddy Martinez


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to