Re: Encrypted repos (https/ftps)

On Fri, Oct 10, 2014 at 09:59:03PM +0200, Axel Beckert wrote:
> Hi Kurt,
> 
> Kurt Roeckx wrote:
> > > The issue is that our ISPs can see the names of the packages that we
> > > download, and i don't think anybody needs to see that. With encrypted
> > > connections this issue would be solved.
> > 
> > Encrypting it will not solve that.  It will only make it slightly
> > harder.
> 
> In don't why that should make it only slightly harder. Please explain.

Because it leaks things like the size of all the packages you're
downloading.  apt doesn't do pipelining.


Kurt