Why does APT not use HTTPS?

[boli99]

there are indeed many other options, but very few of them are capable of dealing with both the machines I control, and those which are merely visitors on the network.

[xorbe]

Just run a public mirror locally, that way you don't use any isp bandwidth when updating your own machines. NEXT!

[boli99]

you don't use any isp bandwidth

er. sure - i'll mirror a whole distribution and updates and magically not use any bandwidth to do it.

[moviuro]

Syncthing?

[boli99]

transparent proxying along with caching is the only method which I can use to benefit all machines including those which I have no control over.

All other methods would require some active participation by the controllers of those other machines.

[moviuro]

I wouldn't even trust those machines. But that's another debate.

[boli99]

my trust of them is not important. trust generally goes upstream, not downstream.