This is the mail archive of the
mailing list for the Cygwin project.
Re: SSL not required for setup.exe download
> On 3/12/19, Andrey Repin wrote:
>> Greetings, Lee!
>>>> It gives you false sense of security. What is worse, everybody is
>>>> to reassure this false sense on every possible occasion.
>>> I don't think it's a false sense of security. https:// isn't "safe"
>>> but it is _safer_ than http://
>> Yep. Now, let's recall mcafee, norton, kaspersky, avast… and all those
>> "antiviruses" that proxy all TLS traffic through their own root certificate
> But you did that to yourself.
I did not. But other people are running that setup unsuspected.
> Hopefully you evaluated the risk/reward in letting your a/v intercept everything.
Yes. That's why am I not running anything of that kind.
With best regards,
Wednesday, March 13, 2019 23:30:34
Sorry for my terrible english...