DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org BD59838708BC
MIME-Version: 1.0
Message-Id: <20210302184109hPtNY09mt9@denova.com>
Date: Tue,  2 Mar 2021 18:41:09 GMT
From: "Bob" <bob@denova.com>
To: cygwin@cygwin.com
Subject: Fix to help novice users verify cygwin.com downloads
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces@cygwin.com>


Hey 

I was searching for some articles about verifying files today and I
came across this page: Cygwin FAQ (http://www.cygwin.com/faq.html)
on your site.

I noticed you recommend very thorough verification, using hashes and sigs.

But usually the data file is downloaded much more than the hash or sig
files. Users often don't verify.

Just wanted to give you a heads up that we created a free open source
program that both downloads and verifies in one step. So your users always verify.

It's like "Cygwin FAQ", but it's a single command that downloads
and verifies thoroughly:

https://denova.com/open/safeget/developer/ 

Might be worth a mention on your page.

Either way, keep up the awesome work!

Cheers,

Bob

P.S. The best way to make sure downloaders verify files is to give them
one command that downloads and verifies in one step. There's a free open
source solution.
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple