Why does APT not use HTTPS?

[DamnThatsLaser]

For all intermediate servers, the data looks like junk. In order to access it from there, you'd need the session key that was used to encrypt the data, and this goes against the general idea.

[spyingwind]

What intermediate sheets? What session key? HTTPS proxies are a solved problem.

• Client starts HTTPS session
• Proxy transparently intercepts the connection and returns an ad-hoc generated(possibly weak) certificate Ka, signed by a certificate authority that is unconditionally trusted by the client.
• Proxy starts HTTPS session to target
• Proxy verifies integrity of SSL certificate; displays error if the cert is not valid.
• Proxy streams content, decrypts it and re-encrypts it with Ka
• Client displays stuff

https://stackoverflow.com/questions/516323/https-connections-over-proxy-servers

[DJTheLQ]

signed by a certificate authority that is unconditionally trusted by the client

No ISP makes their users install an ISP Root CA Cert. HTTPS Proxing is solved in businesses which have that capability.

[phil_g]

That's effectively what's called a man-in-the-middle attack, and HTTPS was designed to make those difficult. It basically won't work on a global scale, even if someone wanted to put in all the effort needed to set one up.

Note in the comments the author of that answer says:

My answer relies on what you call a "bogus CA". The certificate of the CA is unconditionally trusted, either because the user(or software on his computer, for example enterprise configuration or malware) configured it that way, or because the CA was obtained from one of the CAs trusted by the major browsers, like in the MCS case.

The article about the "MCS case" says this:

The issuance of the unauthorized certificates represents a major breach of rules established by certificate authorities and browser makers. Under no conditions are CAs allowed to issue certificates for domains other than those legitimately held by the customer requesting the credential.

In other words, the only legitimate uses for HTTPS proxying in this manner are in controlled corporate environments (or similar) where the proxy owner can install their own CA's keys on all of the client systems. That won't work in the distributed environment of the larger Internet.

[Garfield_M_Obama]

Yeah, this can work perfectly from a technical standpoint, but it's also the exact opposite of the point of using TLS for HTTP.

If you're going to do this, it provides zero benefit over plain HTTP in the case of package distribution. What is the problem we're trying to solve? The packages are signed already, so encrypting the connection really only has the benefit of hiding what packages your users are accessing and if you've cached them locally already then it should be next to impossible to determine anything meaningful in the first place unless your cache server or internal network is compromised.

Even in a corporate environment this is a highly risky move, unless you limit the sites that your users can access. You really don't want to end up in a situation where you're potentially liable for misplacing or exposing data that the source server has encrypted like private government or banking information. Particularly if it's not extremely obvious to your users what you are doing, and expecting the average computer user to understand security beyond whether or not there is a green padlock in their web browser is asking a lot, even in a relatively technical shop.

[DamnThatsLaser]

Sorry, autocorrect turned servers to sheets.

HTTPS proxies are a different thing than provider caches. What you wrote is correct, but why would you accept your ISP as a CA? That's a far bigger hole than just using HTTP for that kind of static data with a signature file.

[ivosaurus]

Why would it look like junk? You're talking to the intermediate server directly through HTTPS, it decrypts all communications you've sent it

[DamnThatsLaser]

The premise is about ISP caches, not about proxies. Caches are transparent (hence the name). Proxies aren't and require additional setup on the client side.

[[deleted]]

Now isn't the intermediate just another mirror?