backuppc (3.3.2-1) unstable; urgency=medium

  Debian's default BackupPC configuration file for Apache now restricts
  access to BackupPC to localhost by default because by default HTTPS is
  not enforced, i.e. "SSLRequireSSL" is commented out.

  Please refer to the comments in /etc/backuppc/apache.conf
  respectively /etc/apache2/conf-available/backuppc.conf what to
  uncomment and comment after having setup HTTPS, e.g. with certbot.

 -- Axel Beckert <abe@debian.org>, Wed, 14 Nov 2018 00:40:28 +0100