On 15/04/2023 19:54, davidson wrote:
On Sat, 15 Apr 2023 to...@tuxteam.de wrote:
On Sat, Apr 15, 2023 at 12:18:57PM -0400, Dan Ritter wrote:
It's nice not to be telling everyone who can sniff a plaintext
connection which packages you are installing,

Without doubt, this is an advantage of a TLS connection. If you
do care about that, here would be one reason.

In case you wish to obscure what software you *install*, but need not
conceal the software you *download*:

  Step one: Make a list of the packages you want, and then augment it
  with as many plausible alternatives and red herrings as you like.

  Step two:
  $ apt-get -d install <many packages>

This downloads the packages only, so you can download packages you
will *not* install, along with ones you will. Then install the proper
subset you want installed, without the '-d' option.

This consumes more resources than using TLS, and increased resource usage was one the arguments made against the need for TLS everywhere.


--
BOFH excuse #377:

Someone hooked the twisted pair wires into the answering machine.

Eduardo M KALINOWSKI
edua...@kalinowski.com.br

Reply via email to