I travel to countries I don't trust--a lot. For example, Vietnam, the virus capital of the world. ESPECIALLY in these areas, but also at home in the USA, I want to remove (or reduce) the possibility that someone is intercepting my auto-updates connection and feeding my computer bogus packages.
My solution is to switch to a mirror using HTTPS. But I don't want to pick just any HTTPS server, I want to select the fastest one. "Select Best Server" is available for HTTP (maybe it includes HTTPS, but it never selects HTTPS). Is there any way to run the same tests searching ONLY mirrors available over HTTPS?
There is no need to use HTTPS, as the packages / data you receive are verified by GPG signatures.
See this post for more details.