X-Recipient: archive-cygwin AT delorie DOT com X-SWARE-Spam-Status: No, hits=-0.8 required=5.0 tests=AWL,BAYES_00,KHOP_RCVD_UNTRUST,KHOP_THREADED,RCVD_IN_DNSWL_LOW,RCVD_IN_HOSTKARMA_NO,TW_CG X-Spam-Check-By: sourceware.org From: "Garrison, Jim (ETW)" To: "cygwin AT cygwin DOT com" Date: Thu, 27 Sep 2012 10:33:49 -0700 Subject: RE: include SHA1/MD5 hash/digest of setup.exe, and HTTPS Message-ID: <201209271733.q8RHXpob096514@barrierL241.nike.com> References: <5062EDA4 DOT 9070509 AT yahoo DOT com> <033d01cd9bf0$f6cf9cf0$e46ed6d0$@motionview3d.com> <5063E0B2 DOT 3030106 AT yahoo DOT com> <03a101cd9cc3$eee1e5b0$cca5b110$@motionview3d.com> <506470F4 DOT 8030602 AT gmail DOT com> <20120927164931 DOT GA5564 AT ednor DOT casa DOT cgf DOT cx> In-Reply-To: <20120927164931.GA5564@ednor.casa.cgf.cx> Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 X-IsSubscribed: yes Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id q8RHY7Cl018101 > -----Original Message----- > From: Christopher Faylor > Subject: Re: include SHA1/MD5 hash/digest of setup.exe, and HTTPS > > There is another aphorism that trumps all of this: "Someone has to do > it". I seem to not be making it clear that it is very unlikely that a > cygwin site maintainer (me) and a setup.exe developer (to a small degree > me + others) are all avidly reading these musings and looking for things > to do. > > Cygwin, like most free software projects, has always been short on doers > and long on "experts with not enough time". So, pontificate all you > want about the best ways to do things but please understand that it's > likely that nothing you say will have any effect on the project unless > you are interested in helping out yourself. > > cgf This deserves to be enshrined somewhere as the canonical (and admirably restrained) answer to "Why doesn't Open Source package X [do|include|implement] Y". -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple