Comment 39 for bug 1464064

8 years later, we still have a lot of download servers available that use either unencrypted http or ftp. As an end user this confuses me. The "select best server" function of the Software & Updates tool will recommend a http server of a local alternative ISP located in my city, which seems to make sense, however after reading this thread I am very unsure whether I should instead choose another download server that is using https.

The Software & Updates tool does show the protocol before choosing a server from the server list, which helps a little.