X-Recipient: archive-cygwin AT delorie DOT com X-Original-To: cygwin AT cygwin DOT com Delivered-To: cygwin AT cygwin DOT com DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org BD59838708BC Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=denova.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=bob AT denova DOT com DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=denova.com; s=dkim; t=1614710469; bh=JuyotOPo3qu9y5xiEy9WLpapCY0Hm3MAp+B/oGrVo8A=; h=Date:From:To:Subject:From; b=epzre73HTiwndUnAKohmdfdK069qiG4Jnm7nRKGGL1dedeFyH0j9UwNG3QLt/830U XsQHatBeenbyN8T/FiszOSpJCBdj4IgWuylJh8qo6IvFse0l0wiCd1yE74hEZk/7fp dXEYPbMm7wiWYPG5H1sOBLGHlNlq5Ywif9HlH033PBA5OAmy9IJcjXWRnF50Ke7cCY eFF1cwt0S1su8Jxz2dv7YapWvcgMoXipUG3N1J3mhxe+ZAPJi6ykaik+LjdXiGHSn4 buTq8K8AzPB6yJz+tRC0ca7E/0g6jOvZVdxO9qtrseHGHyugSwySWYN9kEDPUXnm87 OHy4xzRtxCpUg== MIME-Version: 1.0 Message-Id: <20210302184109hPtNY09mt9@denova.com> Date: Tue, 2 Mar 2021 18:41:09 GMT From: "Bob" To: cygwin AT cygwin DOT com Subject: Fix to help novice users verify cygwin.com downloads X-Spam-Status: No, score=-0.2 required=5.0 tests=BAYES_20, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, HTML_MESSAGE, SPF_HELO_PASS, SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: cygwin AT cygwin DOT com X-Mailman-Version: 2.1.29 List-Id: General Cygwin discussions and problem reports List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: "Cygwin" Hey I was searching for some articles about verifying files today and I came across this page: Cygwin FAQ (http://www.cygwin.com/faq.html) on your site. I noticed you recommend very thorough verification, using hashes and sigs. But usually the data file is downloaded much more than the hash or sig files. Users often don't verify. Just wanted to give you a heads up that we created a free open source program that both downloads and verifies in one step. So your users always verify. It's like "Cygwin FAQ", but it's a single command that downloads and verifies thoroughly: https://denova.com/open/safeget/developer/ Might be worth a mention on your page. Either way, keep up the awesome work! Cheers, Bob P.S. The best way to make sure downloaders verify files is to give them one command that downloads and verifies in one step. There's a free open source solution. -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation: https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple