I am getting a strange error from apt update. The machine is a server I am accessing remotely via ssh. It is running trixie. The machine has the Brave Browser repository and it is getting a "403 Forbidden" message. I am able to use lynx to access the file in question no problem and use firefox on my local machine (a Raspberry Pi5 running Raspberry OS 12 (basically Debian 12, bookworm). I also have a Lenovo laptop which I recently install trixie on and just added the Brave Browser repository to it and apt update behaves as expected. The other *weirdness* is that the dig command returns *different* IP address for the server listed in the Brave Browser repository config file -- it seems to depend on geography and/or ISP path to the Internet backbone (some DNS magic going on here).
What is going on? Remote server: heller@DebianServer:~$ sudo apt update Get:1 http://mirror.llg.one/debian trixie InRelease [140 kB] Hit:2 http://mirror.llg.one/debian trixie-proposed-updates InRelease Err:3 https://brave-browser-apt-release.s3.brave.com stable InRelease 403 Forbidden [IP: 3.167.37.65 443] Error: Failed to fetch https://brave-browser-apt-release.s3.brave.com/dists/stable/InRelease 403 Forbidden [IP: 3.167.37.65 443] Error: The repository 'https://brave-browser-apt-release.s3.brave.com stable InRelease' is not signed. Notice: Updating from such a repository can't be done securely, and is therefore disabled by default. Notice: See apt-secure(8) manpage for repository creation and user configuration details. heller@DebianServer:~$ lynx -head -mime_header https://brave-browser-apt-release.s3.brave.com/dists/stable/InRelease HTTP/1.0 200 OK Accept-Ranges: bytes Age: 2589 Content-Length: 7546 Content-Type: application/octet-stream Date: Wed, 02 Sep 2026 23:39:44 GMT Etag: "bd8d5fe51c8cb8f8c952ee25f2783636" Last-Modified: Wed, 02 Sep 2026 16:35:20 GMT Server: AmazonS3 Via: 1.1 0431e23c0344851eeb0c8f1f10c6edc4.cloudfront.net (CloudFront) Via: 2.0 Prism X-Amz-Cf-Id: aAFcJ2KuHQ59C1g-xnsFdM3WIQAVBZ7iRKqIqh8UP-eqjEqQeGwCwA=X-Amz-Cf-Pop: IAD61-P4 X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: 4bmaKeAqrutHpkM8ZqWHY9e61bq6eKDp X-Cache: Hit from cloudfront Lenovo laptop: gollum3% sudo apt update Hit:1 http://security.debian.org/debian-security trixie-security InRelease Hit:2 http://deb.debian.org/debian trixie InRelease Hit:3 http://deb.debian.org/debian trixie-updates InRelease Hit:4 https://brave-browser-apt-release.s3.brave.com stable InRelease All packages are up to date. gollum3% lynx -head -mime_header https://brave-browser-apt-release.s3.brave.com/dists/stable/InRelease HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 7546 Connection: close Server: AmazonS3 Last-Modified: Wed, 02 Sep 2026 16:35:20 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 4bmaKeAqrutHpkM8ZqWHY9e61bq6eKDp Accept-Ranges: bytes Date: Wed, 02 Sep 2026 23:39:45 GMT ETag: "bd8d5fe51c8cb8f8c952ee25f2783636" X-Cache: Hit from cloudfront Via: 1.1 11280d8f37ba4cb1d8f36f9f2a6e4c76.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P2 Alt-Svc: h3=":443"; ma400 X-Amz-Cf-Id: lA_fu9kcUl32Sk5wJbP-0hVbVPBlHx4_-52lUgEh_mv5W6TbBwg4Eg=Age: 2765 -- Robert Heller -- Cell: 413-658-7953 GV: 978-633-5364 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services [email protected] -- Webhosting Services
