Re: Invalid SSL Certificate

On Wed, Apr 3, 2019 at 1:51 PM Justin Capella wrote:

> http.debian.net CNAME s to static.debian.org

This domain has been deprecated for years, please switch to using the
replacement. At this time, the replacement is backed by two CDN
networks, only one of them (Amazon CloudFront) supports https. In
addition apt doesn't support SRV records on https, so each request
will hit Debian servers and be redirected to the CDN, which is slower
than using http. In addition TLS doesn't provide much protection over
http for apt repositories, it would probably be better to use Debian's
onion services on the Tor network.

https://deb.debian.org/
https://onion.debian.org/