So I have discovered apt-transport-https and understand there are some general advantages to apt over HTTPS - such as it being possible for updates to be entirely hidden by whoever controls the network, or newer packages being replaced with older signed packages, amongst others.So I wonder: are there any alternatives to security.debian.org ?I understand there are plenty of mirrors for the non-security repositories.As of yet, I have only found one repository that is a mirror of the security repository - Debian's official CDN - and it also has HTTPS.I found a script on GitHub that seeks to check all the official mirrors for the security repositories, written a few years ago. But after editing it a little and running it, it would seem none of the official mirrors include the security repository ?I understand package management software can be configured over tor, but I don't think this is particularly a security improvement - just moves the same issues with HTTP to another part of the world.
What available Debian security repo mirrors exist?
debian;package management;repository;gpg;https