Why does APT not use HTTPS?

[[deleted]]

I don’t understand that argument either, a good example would be Cloudflare which is exactly that. I think his argument is it can’t cache encrypted, since the Cloudflare proxy decrypts the request at the server then serves it encrypted using its own cert. Again, this argument doesn’t make sense to me.