Received: from mail-lf1-f51.google.com (mail-lf1-f51.google.com [209.85.167.51])
	by nld3-dev1.alpinelinux.org (Postfix) with ESMTPS id B5687782B74
	for <alpine-user@lists.alpinelinux.org>; Sun, 10 May 2020 13:17:20 +0000 (UTC)
Received: by mail-lf1-f51.google.com with SMTP id 8so2427554lfp.4
        for <alpine-user@lists.alpinelinux.org>; Sun, 10 May 2020 06:17:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=date:from:to:cc:subject:message-id:in-reply-to:references
         :mime-version:content-transfer-encoding;
        bh=3Yjsjdd7TYSbk5dhYGiKOgAj1pV2im9ixJwNHMs5mGo=;
        b=mLw4tb2qOKZ1tkhrFw36m781d+IBXDKJk7dLpnEXRDulamLoTtiERF+4IynkBk9sp5
         RvrF9o0Kkam8TM+5LV+ujzicTui+STUtBJ6LOJyQ3tpeuEqqd2EqRd4zIWNTee8neJkd
         w+o1pUyoWi7TmAzSEpFl/+vhkVSsFRKYHoMT28u5U7V14iQ2gI1PZAu9KwwgX96beATX
         R23YzqCJUxdiWLHvFe/FUcvKYXnhiGjCBKtRk6Iyw5kv713kB2G/htnK//wg/5ddZwTR
         g4qJ9J0/Qgv8eqzRFx2Rni/g42urQvznhQ1I44ENQzFtmPO7VQqDhyktgkIYXOxr7la6
         BX6g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:date:from:to:cc:subject:message-id:in-reply-to
         :references:mime-version:content-transfer-encoding;
        bh=3Yjsjdd7TYSbk5dhYGiKOgAj1pV2im9ixJwNHMs5mGo=;
        b=TmRSIZm3xWWdiHAbrMMDPsAj2CzQqrSYBN2yYOhK9aNsYxgruXjHIfOonafSkOIqcp
         OVKQbmtAQYY4y8udZqnDlwwu/hvSd6+zuJPlX9FC9cp4IuWQ+CmHb50gi4Se2+D2uG9e
         kOtXjNfdrTCM+pI68kj+MBw+llGhW9L+1McFXXK97vVj7FeYpaYSc6hDXPIOL+jCa5a0
         sDmi2XwwmUrpUsWeSYagbYNC7Ryr/9bRw31A7777PRgnSZ2fJ0k9OuMCsgQcCyvstSom
         kVhbxwG9G+KJMUgjNxImpMUW+2n+tilMZthIvF9Us7GotxslPEUopI6SW7L72YhAFE/1
         O5Kg==
X-Gm-Message-State: AOAM531SmCa5VnC8vTi7r82EtJdHwanpU5JPh1PCFjfor9cEReVWkNbz
	ARsa5rlciYeMIglvXD2K68w=
X-Google-Smtp-Source: ABdhPJxHzRQ5Osk4/9Fai5YtvUBd4Zx4nYVgjxK0rM1v5v7fg/bqoXuJeA8bH4pU4Epp5m5oQS1Z6w==
X-Received: by 2002:a19:ed07:: with SMTP id y7mr3832828lfy.31.1589116639907;
        Sun, 10 May 2020 06:17:19 -0700 (PDT)
Received: from kpc.kaey.ru ([91.123.18.165])
        by smtp.gmail.com with ESMTPSA id 4sm5489911lfr.66.2020.05.10.06.17.18
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Sun, 10 May 2020 06:17:19 -0700 (PDT)
Date: Sun, 10 May 2020 16:17:18 +0300
From: Konstantin Kulikov <k.kulikov2@gmail.com>
To: Joe Duarte <songofapollo@gmail.com>
Cc: alpine-user@lists.alpinelinux.org
Subject: Re: Are the repos/apk using http or https?
Message-Id: <20200510161718.2b9d3b8985314c73486c1d17@gmail.com>
In-Reply-To: <CAESemU-1n6zA4WqB6ChebPyEKCtPpwTJDBU3hT-Au7urp+dxig@mail.gmail.com>
References: <CAESemU-1n6zA4WqB6ChebPyEKCtPpwTJDBU3hT-Au7urp+dxig@mail.gmail.com>
X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.32; x86_64-unknown-linux-gnu)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

> Is Alpine literally making unencrypted http requests?

Yes. You need to manually update /etc/apk/repositories file to https urls.
There is no immediate problem, because packages are signed and verified on install,
but you're right https should be used by default.

Please file an issue at https://gitlab.alpinelinux.org/alpine/aports/-/issues so it's not forgotten.