On Tue, Jul 04, 2017 at 12:21:34PM -0000, Matthew Paul Thomas wrote:
> *** This bug is a duplicate of bug 1186793 ***
No, I don't think it is. That bug is about what apt does by default.
This bug is about what protocols Ubuntu makes available in its official
mirrors.
HTTPS could be made available but not be made default, for example. And
currently, it's quite possible for someone to run an HTTPS Ubuntu
mirror, and for users to configure apt with HTTPS against that mirror
instead.
On Tue, Jul 04, 2017 at 12:21:34PM -0000, Matthew Paul Thomas wrote:
> *** This bug is a duplicate of bug 1186793 ***
No, I don't think it is. That bug is about what apt does by default.
This bug is about what protocols Ubuntu makes available in its official
mirrors.
HTTPS could be made available but not be made default, for example. And
currently, it's quite possible for someone to run an HTTPS Ubuntu
mirror, and for users to configure apt with HTTPS against that mirror
instead.