On Thu, Jun 29, 2017 at 09:38:31AM +0200, Julian Andres Klode wrote: > APT 1.5~alpha1 landed in experimental today(ish). It includes three > big changes (one of which, the new https support, is opt-in).
1.5~alpha2 fixes a critical security issue for people that set a custom CaInfo option: Alpha 1 always loaded the system-wide CA store, now only the custom one is loaded. As another notable change, you can now use the http method for tor+https, just set Dir::Bin::Methods::tor+https to "http". Also SRV support now properly uses the port specified in the SRV response, not the original port (there will be a stable update for that). -- Debian Developer - deb.li/jak | jak-linux.org - free software dev | Ubuntu Core Developer | When replying, only quote what is necessary, and write each reply directly below the part(s) it pertains to ('inline'). Thank you.