Take note: Make a file below /etcetera/apt/resources.record.d, not the /and many others/apt/resources.record file in which the distribution's Formal repository addresses are located. This can be a approach that will not destabilize your procedure. It is recommended. We use DNSSEC validation when achievable, as that enables us to be sure https://www.hostscheap.com