Today during a
sudo apt-get dist-upgrade I noticed that at the beginning of the process it lists a series of lines starting as:
Get: 1 http:/mirrordirector.raspberrypi.org ...
Get: 2 http:/archive.raspberrypi.org ...
Is this the actual download ? If yes it sounds really insecure or am I wrong ? How can it be safe from a man in the middle attack for example ?
My question: how can you force that part or any other process of
apt-get to use only HTTPS please ?