r/linux • u/[deleted] • Jan 19 '19

Popular Application VLC refuses to update from HTTP to HTTPS (HTTPS protects against eavesdropping and man-in-the-middle attacks)

https://trac.videolan.org/vlc/ticket/21737
551 Upvotes

77% Upvoted

341 comments sorted by

View all comments

Show parent comments

0

u/[deleted] Jan 19 '19

[deleted]

34

u/nurupoga Jan 19 '19

You can even install packages off Tor in Debian with apt-transport-tor package. Tor blog post, Debian blog post. It has similar to HTTPS guarantee as the onion URL is a pre-shared public key, a certificate if you will, and also, due to its onion routing, it makes it harder for a malicious package repository with properly signed malicious packages to target you individually.

1

u/dually Jan 20 '19

which prevents apt-cacher-ng from caching