another option for a "secure" connection is to use the apt onion services from tor https://blog.torproject.org/tor-heart-apt-transport-tor-and-...