Hacker News Reader

Three also have a transparent HTTP proxy, which breaks apt updates, so you have to manually replace http with https in your apt sources.list.

How are they breaking apt? Aren’t signatures checked only on the package itself?

You randomly get 4xx or 5xx response codes (can't remember which one)

Why was it only http in the first place?

So it could be cached by transparent proxies.... Ones that work properly that is.