4 comments

[ 0.23 ms ] story [ 21.9 ms ] thread
"Don't worry, package signing is enough, you don't need https"
"Don't worry, emudhra is not bad, we have package signing" - Ubuntu

What's the fallback after both signing and https are broken?