X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 838A5385660D
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1686848502;
	bh=LX2UEm2BSMSigmYEsjYIB6M3r50K4R31ZHxrIvy5FtI=;
	h=Date:Subject:To:References:In-Reply-To:List-Id:List-Unsubscribe:
	List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc:
	From;
	b=Ujbd59KXcjBJ+0D4IcISXM272EFtUB6yKxYRYYwtrh2XVHpZjSgF+RQtu67pSm+ao
	CSHaAKONDiNZu3j5WwlN0MGaU3KFdun2OhgS4KKXxIDHmQ4lCq0MGvWpxz7MiUID1t
	iLIMixBqk0KHEIodE0l/z3URTeD7v2beQxjYcM3A=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.2 sourceware.org 16CBF3857BA4
X-Authority-Analysis:	v=2.4 cv=XZqaca15 c=1 sm=1 tr=0 ts=648b43d0
	a=DxHlV3/gbUaP7LOF0QAmaA==:117 a=DxHlV3/gbUaP7LOF0QAmaA==:17
	a=IkcTkHD0fZMA:10 a=w_pzkKWiAAAA:8 a=McOlyyESAAAA:8 a=2RhXCZcTAAAA:8
	a=E8mv_zR_AAAA:8 a=H-U6OJzKAAAA:8 a=AksKwXheXmTrmXZuzP8A:9 a=QEXdDO2ut3YA:10
	a=-FEs8UIgK8oA:10 a=sRI3_1zDfAgwuvI8zelB:22 a=UoH3Eknu7Sz4exW7_WxQ:22
	a=tkGpvXWc-OKycYeMZIQa:22 a=yEpjcXnXwWMFmBBJCNA9:22 a=n46xXRQbOAz4QNNm_cXZ:22
Message-ID:	<166759a7-449e-4eac-7377-985f4db11a7b@Shaw.ca>
Date:	Thu, 15 Jun 2023 11:01:03 -0600
MIME-Version:	1.0
User-Agent:	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101
	Thunderbird/102.11.2
Subject:	Re: Identical Cygwin websites - differing downloads
To:	cygwin AT cygwin DOT com
References:	<-ZOAJV_uZC2NPx5GcZA8caT5sxCBmG7bp1eSMaG4JMS2jy343wOyf3KCgGSZDPajHSGNmdxcEm5My5l7SogATe_jn8BoRrENyp_YmVSXQgA=@proton.me>
	<CAB8Xom_+jYquqOfZr8k3hGPAHYUHesvy5uoyeS0JqLrMrFhieA AT mail DOT gmail DOT com>
Organization:	Inglis
In-Reply-To:	<CAB8Xom_+jYquqOfZr8k3hGPAHYUHesvy5uoyeS0JqLrMrFhieA@mail.gmail.com>
X-CMAE-Envelope:	MS4xfKpjYhLYTYixcCnB9RQeHCI1SYMa0R7nnBev7oJQzy6HdBn+cybOP+vH71OMR4E1U0ndkoHKaut6zlzIJmyD2jWJcxK++aCyNMTw0+u/blb4rD7UVCit
	1XbXqGPGjoAMGiHJOueEkG2KXhJvhDFj4Y5QMY7jDAxDAqQlC32Y0g2XpasiJ7qOBrN8XtrdllQFLskWJOmMYd1IVitW1DMFqwRSbkf8SZ4RU9eh1Q5ek3+D
X-Spam-Status:	No, score=-2.7 required=5.0 tests=BAYES_00, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, KAM_INFOUSMEBIZ, KAM_LOTSOFHASH,
	NICE_REPLY_A, RCVD_IN_DNSWL_LOW, SPF_HELO_NONE, SPF_PASS, TXREP,
	T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version:	SpamAssassin 3.4.6 (2021-04-09) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	Brian Inglis via Cygwin <cygwin AT cygwin DOT com>
Reply-To:	cygwin AT cygwin DOT com
Cc:	Brian Inglis <Brian DOT Inglis AT Shaw DOT ca>, happynumnums <happynumnums AT proton DOT me>
Errors-To:	cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id 35FH25fx014779

On 2023-06-15 09:07, marco atzeri via Cygwin wrote:
> On Thu, Jun 15, 2023 at 3:20 PM happynumnums via Cygwin
> <cygwin AT cygwin DOT com> wrote:
>>
>> When looking for the latest Cygwin installer, I came across two different domains.
>>
>> One insecure:
>> http://cygwin.org/
>>
>> and one secure:
>> https://cygwin.net/
>>
>> When checking the downloaded latest 3.4.6 installer with sha512sum.exe, I get differing checksums from the executables from both websites:
>>
>> an unexpected checksum (from first site)
>> 787c46173f5f91d350d31053f09d2bc18e1a80907a9f571f905fa7579cd2fa7b2502337da57aa70a5c8c4209a365f3604cee3c8ffe6c451b397986ddf17eea14
>>
>> and the expected checksum from the 2nd site (as printed on both pages):
>> 4779bead277ba7e682212ed3b1c9c2a56f9b15586dc2db3949556958b683b6f8a11c1c8957e1027d798281fcc98ccf12c418a609911c7e553787c88f8af86152
>>
>> The first file size shows 1350kB, the 2nd 1356kb.
>>
>> Can somebody clarify, if cygwin.org is a phishing site or otherwise explain the differences?
>>
>> Sent with [Proton Mail](https://proton.me/) secure email.
>>
> 
> all sites point to the same address and all works with HTTPS
> IPv4 address (8.43.85.97)
> 
> https://sitereport.netcraft.com/?url=https://cygwin.net
> 
> problem/cache in the middle ?

or Corporate/ISP proxy interfering?

As noted in the FAQ and the added footers, cygwin.com appears to be the 
preferred site, so should be used in preference to alternative aliases to avoid 
any possible issues.

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retirer     but when there is no more to cut
                                 -- Antoine de Saint-Exupéry

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -