Modern versions of apt have https support builtin, but repositories are typically used over http. Historically ssl has been considered unnecessary given gpg signature checking, but it's probably better to use it where possible these days.
https://ppa.launchpad.net/system76/pop/ubuntu connects over https, but with a certificate for the wrong domain, and fails to serve the required files with certificate checking disabled
So it looks like we should be able to use https sources for what we host ourselves, I guess.
Modern versions of
apthave https support builtin, but repositories are typically used over http. Historically ssl has been considered unnecessary given gpg signature checking, but it's probably better to use it where possible these days.So it looks like we should be able to use
httpssources for what we host ourselves, I guess.