Received: from mail-lj1-f179.google.com (mail-lj1-f179.google.com [209.85.208.179])
	by nld3-dev1.alpinelinux.org (Postfix) with ESMTPS id 9D61B782BAC
	for <~alpine/users@lists.alpinelinux.org>; Mon, 11 May 2020 05:55:36 +0000 (UTC)
Received: by mail-lj1-f179.google.com with SMTP id f11so8086388ljp.1
        for <~alpine/users@lists.alpinelinux.org>; Sun, 10 May 2020 22:55:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=date:from:to:cc:subject:message-id:in-reply-to:references
         :mime-version:content-transfer-encoding;
        bh=LzVi1bKrUoIATi6jznRMnLcnew64hWy0qF/l3QbYPM8=;
        b=os1Lv/j2bjIAqO52kV1JdhRLdMB7dAlOv7tXWyjVSwcMykLzi438pkPwSveCxW//ZC
         7hVxVx0/V+1cJ733GQzRzbzDA2/7sw2Pa/cUjlVCNbJwOallZJJ2JSqwnGuaGtl90r/g
         d4qKHlW4rZYVd1KWrRHbyEQl6hcN2CXQKx9oeG4igwAcSIYofVQvglDRArGMuNB+puHe
         WzS+a6HpiR2bfu5l4GyiJFufoo9Fvztx++Eqvo675izyl73ILSBdAU2Sn2TDBnWzN5CW
         Tg6ZVFMVN8w7E2ZeyF2diJkD+SI4Mwi8FSDtF6YZOK/nIORjaDEZZiG5xl9UaZ/8OMYr
         sH+w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:date:from:to:cc:subject:message-id:in-reply-to
         :references:mime-version:content-transfer-encoding;
        bh=LzVi1bKrUoIATi6jznRMnLcnew64hWy0qF/l3QbYPM8=;
        b=MV7ySbJ6ZJrMUl2WUMzrL1m8W2zt90sBoe0DQklaZjxH9FED46ZtO5gWSsy2XIUQYb
         ULzZ9N6ACTHOoh4enAKjLZEYy8mrxJsnURcdqHmTBvCdYTSyf/V/7Eo3MwT6PXoqo9IL
         sFb/gurBkhLRRTRgU0B0n/y53sGd80fqVifpfrj5UVrVzS03rZwVlsv6F3HZkn4/a2ef
         exVe8DgZvwawlSZwchc8k9UlEl2a8bx0f8qSsHL/cfCIt4LI3XRmx4qVtQbGWCJPTjrp
         4RbnBekrTJ55ouufixoKy4FtqP9EhbYMNHBVeY29pgoHWvdpjC8grfWxBrUMNZ9vrKB6
         TxDw==
X-Gm-Message-State: AOAM532jGwyxr6TMt6Y7kCW6/x9Jfwc7Bn2hWD8H31JaAG0JCPD/LmcG
	04VzZpBNflCz2Q+l+TBszlHzkrH3
X-Google-Smtp-Source: ABdhPJyfD07/PctOzWcegE3NypEv0EhfjH50By/ClH7mrUcIpRBGsYcLT8PHqTWTgdNP7xpbHg+aFQ==
X-Received: by 2002:a2e:909a:: with SMTP id l26mr8830096ljg.262.1589176536209;
        Sun, 10 May 2020 22:55:36 -0700 (PDT)
Received: from kpc.kaey.ru ([91.123.18.165])
        by smtp.gmail.com with ESMTPSA id d22sm9694126lfi.31.2020.05.10.22.55.35
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Sun, 10 May 2020 22:55:35 -0700 (PDT)
Date: Mon, 11 May 2020 08:55:35 +0300
From: Konstantin Kulikov <k.kulikov2@gmail.com>
To: Ariadne Conill <ariadne@dereferenced.org>
Cc: ~alpine/users@lists.alpinelinux.org
Subject: Re: Are the repos/apk using http or https?
Message-Id: <20200511085535.595fe236b40b628d7fb57c75@gmail.com>
In-Reply-To: <3414617.y9zrWrDLY7@localhost>
References: <CAESemU-1n6zA4WqB6ChebPyEKCtPpwTJDBU3hT-Au7urp+dxig@mail.gmail.com>
	<20200510161718.2b9d3b8985314c73486c1d17@gmail.com>
	<3414617.y9zrWrDLY7@localhost>
X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.32; x86_64-unknown-linux-gnu)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

> I think, however, in 2020 it is probably a good idea to prefer https over http 
> mirrors.  A good solution would be to have two lists, and ask users if they 
> wish to use an http or https update channel.

There is absolutely no reason to give users an option to go insecure, 
especially if you can manually edit repositories file.
Just make sure ca-certificates and haveged are part of standard/virt iso releases.