Comment by codedokode

What about replay attack? Providing apt with old metadata and packages?