Suppose I need to connect to the internet but I cannot (or I don't want to) trust anything outside of my laptop. Therefore I will need to make sure all connections are secure, so I guess this means they should be encrypted and the destination should be able to be trusted.
To browse the web, I can use Firefox with the plugin "HTTPS Everywhere" set to "block every unencrypted request", and if I'm not mistaken I guess that should be enough for surfing the internet. However, browsing the web is only part of the story. There could be some processes or applications that don't make secure connections, including "default" or "core" applications like the system updater itself, or some applications maybe be misconfigured. So what should I do to make sure Linux only uses secure connections that can be trusted, even at the cost of having to avoid or block any insecure connections?