Package: general Severity: wishlist Dear developers,
As we discussed on -devel(*), it seems that we can enable https for {deb,security}.debian.org by default. With this bug report, I'll collect related things and fix it. - Update mirror list (how?) - Update security mirror setting in d-i (how?) - https://www.debian.org/mirror/list.en.html points http""://deb.debian.org, it should be https. - deb.debian.org says "deb http://", it should be "deb https://" - In release notes, it should be https://security.debian.org, at least See https://www.debian.org/releases/stable/amd64/release-notes/ch-information.html#security-archive *) https://lists.debian.org/debian-devel/2021/08/msg00269.html