This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: SSL not required for setup.exe download
Hi Andrey,
On Sun, Mar 10, 2019 at 8:35 AM Andrey Repin <anrdaemon@yandex.ru> wrote:
> > Is there any reason not to force this redirect and close this security hole?
>
> If you care that much, you would use https.
> If not, then I see no reason to bend to hysteric crowd.
You are correct: careful, diligent, knowledgeable people will know to use https.
Those are not the people I'm worried about however... I'm worried
about the other 95% of humanity :)
-Archie
--
Archie L. Cobbs
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple