On: Why does APT not use HTTPS?

[zamadatix]

You've proposed a reverse argument to an argument that was never made. ctz never said anything about vulnerabilities or implementation issues, they said a captive portal is a problem for apt over HTTP but not HTTPS. This is also true of ISPs that like to insert things into HTTP sessions.

[pascal_cuoq → zamadatix]

“bugs”