Re: HTTPS enabled Debian Security repository

[Rob van der Putten]

Hi there

On 30/10/17 12:24, Russell Coker wrote:

<cut>

I agree.  There's little downside nowadays.  Squid doesn't work particularly
well caching APT repositories nowadays (strange timeouts and hangs during
downloads) so the caching benefit of non-SSL has mostly gone away.

I have no problems with Squid caching apt repositories.
Squid can be made to act as a man in the middle, caching HTTPS, but this 
incompatible with DANE.


Regards,
Rob