Re: SSL not required for setup.exe download
- Date: Sun, 10 Mar 2019 11:35:35 -0500
- From: Archie Cobbs <archie.cobbs@xxxxxxxxx>
- Subject: Re: SSL not required for setup.exe download
On Sun, Mar 10, 2019 at 8:35 AM Andrey Repin <anrdaemon@xxxxxxxxx> wrote:
> > Is there any reason not to force this redirect and close this security hole?
> If you care that much, you would use https.
> If not, then I see no reason to bend to hysteric crowd.
You are correct: careful, diligent, knowledgeable people will know to use https.
Those are not the people I'm worried about however... I'm worried
about the other 95% of humanity :)
Archie L. Cobbs
Problem reports: http://cygwin.com/problems.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple