Am 10.02.21 um 10:20 schrieb Peter Meier: > However, I guess since things are intervened with Fedora and Fedora also > has: > > 1. repo_gpgcheck not enabled by default :( I had asked this before. JFYI: https://bugzilla.redhat.com/show_bug.cgi?id=1851242 > 2. a mixed list of http, https and rsync mirrors > 3. no way on dnf (afaik) to prefer https > > it's probably a good starting point over there. > -- Leon