Why does APT not use HTTPS?

Re:Why does APT not use HTTPS? by brazzy on Monday January 21, 2019 @11:04AM (#18961213)

I think the core argument first of all is that it is not attainable trivially by "just using HTTPS". So it's a question of costs vs. benefits, where the costs are pretty big (change the whole infrastructure).

[ Parent | on HN ]

Re:Why does APT not use HTTPS? by ynniv on Monday January 21, 2019 @11:31AM (#18961418)

This is wrong. A great deal more privacy is attainable by trivially using HTTPS. Privacy in the presence of stream inspection is more difficult, but attainable by padding files to have quantized lengths.

[ Parent | on HN ]

Re:Why does APT not use HTTPS? by Godel_unicode on Monday January 21, 2019 @12:57PM (#18962084)

You are entirely incorrect in this instance, for all the reasons laid out in this thread.

Looking at stream sizes is not "advanced deep packet inspection", it's in fact the opposite of that.

[ Parent | on HN ]