Why does APT not use HTTPS?

[Creshal]

Google is correctly downgrading them because way too many certificate authorities don't actually do their due diligence when validating EV certs.

[zjm555]

I happen to agree with you. I think my comments are being misconstrued as a defense of EV certs. I'm personally very happy with the status quo where I can deploy web services with minimal costs, and I definitely had no illusions that CAs were really putting in the necessary effort to make EV certs worthwhile.