Comment Comment by jlarocco Even with HTTPS, it's easy enough to figure out which package is being downloaded based on the download size, as explained in TFA.Every time this comes up, it's always the same handful of incorrect arguments made in favor of HTTPS.The cargo-cult mentality that HTTPS == security really does more damage than it does good. parent jlarocco 7 years ago
Every time this comes up, it's always the same handful of incorrect arguments made in favor of HTTPS.
The cargo-cult mentality that HTTPS == security really does more damage than it does good.