On 12/07/2016 10:18 PM, Philipp Kern wrote: > choose-mirror does not ask for the protocol by default, as the question > is priority medium. I did my installation by passing priority=medium on > the command-line, but you could as well preseed the protocol to https I > think. In that case it does not show a list of mirrors (because > Mirrorlist does not list https capabilities), but works just fine with > deb.debian.org, which points to Cloudfront for HTTPS support. d-i > component load worked, debootstrap worked and the resulting chroot had > apt-transport-https and a sources.list pointing to > https://deb.debian.org. The security archive was added without https, > but that's unavoidable at this point given that it does not actually > support it.
We could use deb.debian.org as default security mirror, I guess. Or add a https vhost on our security mirrors. Definitely not a blocker for landing this though. [...] > So I suppose this should be ok to commit and push? > No objection from me, at least. Thanks for doing this work. Cheers, Julien