X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.3.2 sourceware.org BD59838708BC
Authentication-Results:	sourceware.org;
	dmarc=none (p=none dis=none) header.from=denova.com
Authentication-Results:	sourceware.org; spf=pass smtp.mailfrom=bob AT denova DOT com
DKIM-Signature:	v=1; a=rsa-sha256; c=simple/simple; d=denova.com; s=dkim;
	t=1614710469; bh=JuyotOPo3qu9y5xiEy9WLpapCY0Hm3MAp+B/oGrVo8A=;
	h=Date:From:To:Subject:From;
	b=epzre73HTiwndUnAKohmdfdK069qiG4Jnm7nRKGGL1dedeFyH0j9UwNG3QLt/830U
	XsQHatBeenbyN8T/FiszOSpJCBdj4IgWuylJh8qo6IvFse0l0wiCd1yE74hEZk/7fp
	dXEYPbMm7wiWYPG5H1sOBLGHlNlq5Ywif9HlH033PBA5OAmy9IJcjXWRnF50Ke7cCY
	eFF1cwt0S1su8Jxz2dv7YapWvcgMoXipUG3N1J3mhxe+ZAPJi6ykaik+LjdXiGHSn4
	buTq8K8AzPB6yJz+tRC0ca7E/0g6jOvZVdxO9qtrseHGHyugSwySWYN9kEDPUXnm87
	OHy4xzRtxCpUg==
MIME-Version:	1.0
Message-Id:	<20210302184109hPtNY09mt9@denova.com>
Date:	Tue, 2 Mar 2021 18:41:09 GMT
From:	"Bob" <bob AT denova DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Fix to help novice users verify cygwin.com downloads
X-Spam-Status:	No, score=-0.2 required=5.0 tests=BAYES_20, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, HTML_MESSAGE, SPF_HELO_PASS,
	SPF_PASS autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version:	SpamAssassin 3.4.2 (2018-09-13) on
	server2.sourceware.org
X-Content-Filtered-By:	Mailman/MimeDel 2.1.29
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Sender:	"Cygwin" <cygwin-bounces AT cygwin DOT com>

Hey 

I was searching for some articles about verifying files today and I
came across this page: Cygwin FAQ (http://www.cygwin.com/faq.html)
on your site.

I noticed you recommend very thorough verification, using hashes and sigs.

But usually the data file is downloaded much more than the hash or sig
files. Users often don't verify.

Just wanted to give you a heads up that we created a free open source
program that both downloads and verifies in one step. So your users always verify.

It's like "Cygwin FAQ", but it's a single command that downloads
and verifies thoroughly:

https://denova.com/open/safeget/developer/ 

Might be worth a mention on your page.

Either way, keep up the awesome work!

Cheers,

Bob

P.S. The best way to make sure downloaders verify files is to give them
one command that downloads and verifies in one step. There's a free open
source solution.
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -