Bug#750522: HTTPS for mirrors

Package: mirrors Followup-For: Bug #750522 Dear mirror team, It's hard to find HTTPS-enabled mirrors with valid certificates (see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893980) It would be great to have a list of HTTPS-enabled mirrors with valid certificates. This list can be automa

Bug#750522: HTTPS for mirrors

ilf: B. "include existing HTTPS mirrors wherever Debian mirrors are listed" E. Encourage users to use HTTPS mirrors Arch Linux does this. The "Pacman Mirrorlist Generator" [1] has a link to "All mirrors, HTTPS only" [2]. 1. https://www.archlinux.org/mirrorlist/ 2. https://www.archlinux.org/m

Bug#750522: HTTPS for mirrors

I would like to revive this two-year-old debate. 1. Not everyone is convinced that HTTPS is a valuable and worthwile. I encourage doubters to re-read these threads: https://lists.debian.org/debian-security/2014/07/msg2.html https://lists.debian.org/debian-security/2014/07/msg00022.html And