Comment by basilikum

It's not the default, but you can install apt-transport-https and then just change the update URLs to https assuming your mirror supports that.