Are the patches delivered securely?

To reduce load on our servers, the patches are delivered via HTTP. However, due to signature checking of the modules, we are able to ascertain the source is officially Canonical.