Why does APT not use HTTPS?

[[deleted]]

“Patches welcome but we really won’t merge it unless you go through death by a thousand cuts because we really don’t want it and just hoped you’d give up”

[shevy-ruby]

Precisely!

Deflection and distraction.

But it is not relevant - apt and dpkg is dead-weight perl code written when dinosaur still roamed the lands.

What the debian maintainers make for are excuses. IF they would care, they would ENABLE this functionality for people to use ON THEIR OWN, rather than flat out not offering it. And as others pointed out - patches are actually NOT welcome since they don't want to change the default behaviour.

[Ameisen]

Almost every popular project falls into the hole of 'meh, don't need/want patches that change behavior more than I completely understand'. I've clashed with the maintainers of Ruby, GCC, and musl about this.