Web lists-archives.com

Re: SSL not required for setup.exe download




Hi Andrey,

On Sun, Mar 10, 2019 at 8:35 AM Andrey Repin <anrdaemon@xxxxxxxxx> wrote:
> > Is there any reason not to force this redirect and close this security hole?
>
> If you care that much, you would use https.
> If not, then I see no reason to bend to hysteric crowd.

You are correct: careful, diligent, knowledgeable people will know to use https.

Those are not the people I'm worried about however... I'm worried
about the other 95% of humanity :)

-Archie

-- 
Archie L. Cobbs

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple