Cygwin's installation and security models?

[lloyd.wood@yahoo.co.uk]

I'd like to understand Cygwin's installation and
security models better: 

- Cygwin's installers aren't signed.
- downloads are from a number of untrusted mirrors
  via http/ftp, and packages aren't verified. 


Is this correct?
thanks
 
Lloyd Wood lloyd.wood@yahoo.co.uk http://savi.sf.net/ 

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple