Re: Cygwin website / docs

2016-05-20 Thread Corinna Vinschen
On Apr 23 18:26, Brian Clifton wrote: > Awesome thanks, Corinna! :) > > If I did have changes for review, what does that process look like? I > looked at the FAQ and didn't see anything RE: that. Would it be best > to link to tar up and link to a patch (rebased against the live remote > repo) in t

RE: Cygwin website / docs

2016-04-23 Thread Brian Clifton
ginal Message- From: cygwin-ow...@cygwin.com [mailto:cygwin-ow...@cygwin.com] On Behalf Of Corinna Vinschen Sent: Saturday, April 23, 2016 6:30 AM To: cygwin@cygwin.com Subject: Re: Cygwin website / docs On Apr 22 19:27, Brian Clifton wrote: > Hi folks, > > Is the website source

Re: Cygwin website / docs

2016-04-23 Thread Corinna Vinschen
On Apr 22 19:27, Brian Clifton wrote: > Hi folks, > > Is the website source for cygwin.com (including the documentation) in a > public git repo? Yes, we moved it from CVS to git a couple of weeks ago. I added a pointer to the website git repo to https://cygwin.com/git.html. HTH, Corinna --

Cygwin website / docs

2016-04-22 Thread Brian Clifton
Hi folks, Is the website source for cygwin.com (including the documentation) in a public git repo? Thanks Brian -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http:

Re: Cygwin website uses http: (not https:) for .exe downloads, allowing man-in-the-middle attack

2015-02-27 Thread Yaakov Selkowitz
xe executables explicitly > use "http://";, and not "https://";, even when you go to the https > version of the Cygwin website. The links are now relative, so this should no longer be an issue. Thanks for reporting, Yaakov -- Problem reports: http://c

Re: Cygwin website uses http: (not https:) for .exe downloads, allowing man-in-the-middle attack

2015-02-26 Thread Warren Young
On Feb 26, 2015, at 3:39 PM, Darik Horn wrote: > > Note that GPG signatures are published for the Cygwin setup binaries: If someone can MITM the *.exe files, they can MITM the GPG sigs, too. You could try and be diligent and check that the signature was made with a GPG key you trust, but I’ll

Re: Cygwin website uses http: (not https:) for .exe downloads, allowing man-in-the-middle attack

2015-02-26 Thread David A. Wheeler
's possible it's okay (I haven't done a packet capture on it), but it looks really suspicious. Links to executables should explicitly say "https://";. It's a trivial change to the webpage, too. > > You might also want to enable "HTTP Strict Transport S

Re: Cygwin website uses http: (not https:) for .exe downloads, allowing man-in-the-middle attack

2015-02-26 Thread Darik Horn
Note that GPG signatures are published for the Cygwin setup binaries: * http://cygwin.com/setup-x86.exe.sig * http://cygwin.com/setup-x86_64.exe.sig -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/doc

Re: Cygwin website uses http: (not https:) for .exe downloads, allowing man-in-the-middle attack

2015-02-26 Thread Corinna Vinschen
es explicitly use > "http://";, and not "https://";, even when you go to the https version > of the Cygwin website. This use of http: enables a man-in-the-middle > attack on anyone trying to download the Cygwin installer. In > particular, a man-in-the-middle could malici

Cygwin website uses http: (not https:) for .exe downloads, allowing man-in-the-middle attack

2015-02-26 Thread David A. Wheeler
even when you go to the https version of the Cygwin website. This use of http: enables a man-in-the-middle attack on anyone trying to download the Cygwin installer. In particular, a man-in-the-middle could maliciously modify the .exe, and there are many programs that can automatically insert

Re: Typo in Cygwin website main menu

2004-04-19 Thread Corinna Vinschen
On Apr 19 14:42, Zas wrote: > Hi, > > In main menu present on most pages: > > http://x.cygwin.com/";>Cygwin/X > Home > here Thanks, fixed. Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Co-Project Leader mailto:[EMAIL PROT

Typo in Cygwin website main menu

2004-04-19 Thread Zas
Hi, In main menu present on most pages: http://x.cygwin.com/";>Cygwin/X Home here Regards, -- Zas -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html F

link correction originating from cygwin website

2003-09-10 Thread Carlo Florendo
Hello, The link for the starship trader grahical console as pointed to in the software section of the cygwin website is: http://cygwin.com/www.geocities.com/kirellii The cygwin.com could probably be stripped. Thanks! Best Regards, Carlo -- Carlo Florendo Astra Philippines Inc. URL: http

Cygwin website

2002-02-04 Thread Christopher January
The news items on http://www.cygwin.com have a closing tag, but are missing the opening tag. Regards Chris -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: