Re:Sequoia PGP 1.0 Released: The Seedling Is a Sapling
by anderskaseorg on Wednesday December 16, 2020 @08:31PM
(#25451221)
No, a default Debian installation downloads packages over plain HTTP. It doesn’t even support downloading packages over HTTPS unless you install the optional apt-transport-https package and edit your sources.list.
It uses SHA-2 checksums since Debian 9, though.