X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 444283857004
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1686841722;
	bh=6Fetk97Ygj+8XyiLZYqeAqWaG9ul94u3BUVb+xProeg=;
	h=References:In-Reply-To:Date:Subject:To:Cc:List-Id:
	List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:
	From:Reply-To:From;
	b=RMBjkbdjyTs4ow1u7Kxle9wnQ+rMarLWXOK2lv+C3GPEfjoL/efRugloUMtlEZu3K
	5at4Q1PKRTSQaCxQfBxVVYMzF3s0V0QrX3PUSAZERYO0uOGcgarqdcD694/wS8zjiX
	ji13pek0X8QbZFBRpaVen5UJq2f/1Iw0bMnTuVUs=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.2 sourceware.org BEF8A3858C2F
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20221208; t=1686841683; x=1689433683;
	h=content-transfer-encoding:cc:to:subject:message-id:date:from
	:in-reply-to:references:mime-version:x-gm-message-state:from:to:cc
	:subject:date:message-id:reply-to;
	bh=UuyVGsE9ds/S6czqZ0+qLSO+7vUof1+8uzL83kEeav0=;
	b=KpNpFswoKaEXTskz4U5aif94zOawGfDje43mfqdsyBK9Gk2C7bTQkzfwUpcU2uJcGn
	1qaN0QncmW+cxLFA6OKBzZfqq/HAQA1MHv2sZjfOWd4EnxD+WWODnQqg6gZunEbnvJkj
	IYP2PJcWvkiWQS7D6CuqdXJJHUa3dNjTrt0Jg/csZmgWETn3jXU7f9JmFNVV9J1rp5es
	CKASprFfdwbQaGXXcBNOIocVZU7HC0rlEjEpIDOPbGdYYCxxypH2sO9v2AhcTjMNICT/
	pSwWDZOX5hq+qzZdeLxhoGPprASePfL/5A2UW3K6Orl1ARq9DdiKObeZptEZuA9FtBs0
	eyYQ==
X-Gm-Message-State:	AC+VfDx4qU6VDGW8F951ijgnSik+i9zz+h3gT4eRLTmUbTGDcLoVcntr
	Us5GVBja6qmuBb4LczB5inndtlUmjuuFlpkRpKg=
X-Google-Smtp-Source:	ACHHUZ4jHF3oYCNdv3iQRcilXPIi9u4IGheJkg7Mi14wn4jupsVVs1gWzfRhqBSlZGnglJetGLjpZtegEkSKBlVDKm8=
X-Received:	by 2002:a05:6358:cc1b:b0:12b:de97:1be4 with SMTP id
	gx27-20020a056358cc1b00b0012bde971be4mr8209294rwb.30.1686841682805; Thu, 15
	Jun 2023 08:08:02 -0700 (PDT)
MIME-Version:	1.0
References:	<-ZOAJV_uZC2NPx5GcZA8caT5sxCBmG7bp1eSMaG4JMS2jy343wOyf3KCgGSZDPajHSGNmdxcEm5My5l7SogATe_jn8BoRrENyp_YmVSXQgA=@proton.me>
In-Reply-To:	<-ZOAJV_uZC2NPx5GcZA8caT5sxCBmG7bp1eSMaG4JMS2jy343wOyf3KCgGSZDPajHSGNmdxcEm5My5l7SogATe_jn8BoRrENyp_YmVSXQgA=@proton.me>
Date:	Thu, 15 Jun 2023 17:07:51 +0200
Message-ID:	<CAB8Xom_+jYquqOfZr8k3hGPAHYUHesvy5uoyeS0JqLrMrFhieA@mail.gmail.com>
Subject:	Re: Identical Cygwin websites - differing downloads
To:	happynumnums <happynumnums AT proton DOT me>
Cc:	"cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
X-Spam-Status:	No, score=0.3 required=5.0 tests=BAYES_00, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, KAM_INFOUSMEBIZ,
	KAM_LOTSOFHASH, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP,
	T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6
X-Spam-Checker-Version:	SpamAssassin 3.4.6 (2021-04-09) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	marco atzeri via Cygwin <cygwin AT cygwin DOT com>
Reply-To:	marco atzeri <marco DOT atzeri AT gmail DOT com>
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id 35FF972n020302

On Thu, Jun 15, 2023 at 3:20 PM happynumnums via Cygwin
<cygwin AT cygwin DOT com> wrote:
>
> When looking for the latest Cygwin installer, I came across two different domains.
>
> One insecure:
> http://cygwin.org/
>
> and one secure:
> https://cygwin.net/
>
> When checking the downloaded latest 3.4.6 installer with sha512sum.exe, I get differing checksums from the executables from both websites:
>
> an unexpected checksum (from first site)
> 787c46173f5f91d350d31053f09d2bc18e1a80907a9f571f905fa7579cd2fa7b2502337da57aa70a5c8c4209a365f3604cee3c8ffe6c451b397986ddf17eea14
>
> and the expected checksum from the 2nd site (as printed on both pages):
> 4779bead277ba7e682212ed3b1c9c2a56f9b15586dc2db3949556958b683b6f8a11c1c8957e1027d798281fcc98ccf12c418a609911c7e553787c88f8af86152
>
> The first file size shows 1350kB, the 2nd 1356kb.
>
> Can somebody clarify, if cygwin.org is a phishing site or otherwise explain the differences?
>
> Sent with [Proton Mail](https://proton.me/) secure email.
>

all sites point to the same address and all works with HTTPS
IPv4 address (8.43.85.97)

https://sitereport.netcraft.com/?url=https://cygwin.net

problem/cache in the middle ?

Regards
Marco

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -