SSL access to archive.ubuntu.com

[Ralf Mardorf]

On Mon, 3 Oct 2016 13:06:23 +0200, Jan Lühr wrote:
>I'm trying to download netboot.tar.gz in a secure manner - can you help
>me here?
>
>Is it possible to connect to archive.ubuntu.com via ssl?

It would be secure to verify downloads by trusted keys, in the end
you anyway will trust signed packages. I don't know why Ubuntu makes it
that hard to find signed checksums.

http://www.ubuntu.com/download/how-to-verify

I made a minimal install by using a sever image. I unckecked all offers
to install packages by default.

The hardest issue is to establish your web of trust, to ensure that the
Ubuntu keys are good.

Regards,
Ralf