Security Concern: setup.exe signature difficult to verify

[Greg Chicares]

On 2009-05-20 03:03Z, Doug Bateman wrote:
> 
> Yes, you can download http://www.cygwin.com/setup.exe.sig.  However
> you won't find mention of that on the website.
> Sadly, to check this signature you have to already have gpg.exe
> installed.  This of course requires you already have cygwin installed.

Here's a native msw binary:
  ftp://ftp.gnupg.org/gcrypt/binary/gnupg-w32cli-1.4.9.exe


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/