X-Recipient: archive-cygwin@delorie.com X-SWARE-Spam-Status: No, hits=-1.4 required=5.0 tests=AWL,BAYES_00,EXECUTABLE_URI X-Spam-Check-By: sourceware.org Message-ID: <4A1393E6.9010504@sbcglobal.net> Date: Wed, 20 May 2009 05:23:50 +0000 From: Greg Chicares User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: cygwin@cygwin.com Subject: Re: Security Concern: setup.exe signature difficult to verify References: <66baf7b90905192002s7ab184d2le0f22e987875faad@mail.gmail.com> <66baf7b90905192003j1071dbe9vad179da6c74905fb@mail.gmail.com> In-Reply-To: <66baf7b90905192003j1071dbe9vad179da6c74905fb@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-IsSubscribed: yes Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com On 2009-05-20 03:03Z, Doug Bateman wrote: > > Yes, you can download http://www.cygwin.com/setup.exe.sig. However > you won't find mention of that on the website. > Sadly, to check this signature you have to already have gpg.exe > installed. This of course requires you already have cygwin installed. Here's a native msw binary: ftp://ftp.gnupg.org/gcrypt/binary/gnupg-w32cli-1.4.9.exe -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/