DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:content-type:mime-version:subject:from
	:in-reply-to:date:content-transfer-encoding:message-id
	:references:to; q=dns; s=default; b=jbr7RC/h5CBsxARzSuX6KcbtTvU+
	RFHI+lCpo0Bdg6ry6mkFgq3xQPa0Y/bTwD12a8AZbdFeftLkIrYiy/fZrl5mLAsY
	d7SZ4236GzezemQ+UVTVLQvNd84twx8L8BYhdiOHBXfmdyxLs14tVbgV2xQZHei/
	FdelQBDKpKkIEYs=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
Subject: Re: Proposed patch for web site: update most links to HTTPS
From: Vince Rice <vrice@solidrocksystems.com>
In-Reply-To: <0D835E9B9CD07F40A48423F80D3B5A702EAF3FBD@USA7109MB022.na.xerox.net>
Date: Mon, 25 Apr 2016 14:58:56 -0500
Message-Id: <44C9F285-6E2A-4111-BBDE-957A6E4B4581@solidrocksystems.com>
References: <20160425124332.GO2345@dinwoodie.org> <0D835E9B9CD07F40A48423F80D3B5A702EAF3FBD@USA7109MB022.na.xerox.net>
To: "cygwin@cygwin.com" <cygwin@cygwin.com>
Content-Transfer-Encoding: 8bit

> On Apr 25, 2016, at 2:33 PM, Nellis, Kenneth <Kenneth.Nellis@xerox.com> wrote:
> 
> -----Original Message-----
> From: Adam Dinwoodie 
>> ...
>> But I agree with Brian: the Cygwin website
>> should use https everywhere unless there's some good, specific reason
>> why it's a bad idea...
> 
> 1. Did Brian say that? I couldn't find it in the thread.
> 2. I would be interested to hear the rationale for such a statement.
> Cygwin is open source. What's the point of encrypting?

I’m not sure what being open source has to do with it.
It should be encrypted for privacy. Frankly, from what we’ve seen in the last couple of years, plain http: should disappear. It should all be https. (And Adam is exactly correct on the performance; it is a non-issue today and has been for years.)


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple