Hacker News Reader

I don't care for home-brew security, I need something standard.

Also... the firewall at work breaks APT HTTP pipelining. Very very annoying. It would not be able to do so if APT was using HTTPS.

View on HN

The signature method used by Linux mirrors has existed longer than HTTPS has, there's nothing homebrew about it.

I trust the file signatures, but if you need to write a full article arguing something is secure then it can be made more secure by making the system simpler and more standard.

The apt system is simpler. HTTPS is merely more popular, and breaks existing apt use-cases.

You are going to become very upset when you discover the simplicity of TLS.

> It would not be able to do so if APT was using HTTPS.

Oh, you are in for a surprise when you find out what middleboxes really do these days.

Reply on news.ycombinator.com