Non https Arch Update Servers?

[Christopher67]

Do you trust the non https(http) Arch update servers, or am i being overly cautious?

[anon31687413]

The important thing is package signature checking. If the sigs are okay, you should be fine.

[anon3337769]

I use the https, but I would have no fear of the http.

[Christopher67]

Thanks @anon3337769 , @anon31687413

[keybreak]

Nope, i don’t - i use only https

[manuel]

EndeavourOS mirrors are all https…
Arch mirrors (that we use too) have both.

Http mirrors can be slightly faster, but anyway I’d recommend using only https mirrors if possible.

[Christopher67]

Thanks @keybreak, @manuel