DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:content-type
	:content-transfer-encoding:mime-version; q=dns; s=default; b=pAj
	B0XwYdrzBdq9lJrjEvdzaoe1jlKTGlFi5de2wo0Z0gfcdkKg62tbvu5IxERiuVNb
	xaB1UiTk8McbMhDGs44JZ8JhjnVyrR0FR9wTRvr8bR5+EG0zAaeBjoW9x2ouXdz9
	QqFaGbnRigJJQhN0CFZrNfVik/Ury+0iJ0HepQBo=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
From: Brian Clifton <brian AT clifton DOT me>
To: "cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
Subject: Proposed patch for web site: update most links to HTTPS
Date: Sun, 24 Apr 2016 17:18:18 +0000
Message-ID: <BL2PR03MB228A4FE7B2CCA51E5FF5163DF610@BL2PR03MB228.namprd03.prod.outlook.com>
spamdiagnosticoutput: 1:23
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Apr 2016 17:18:18.5557 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 8bdfec6b-c71e-4ab9-8b6b-9de7cf58a5f5
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL2PR03MB225
X-IsSubscribed: yes
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id u3OHIk3l025704

Hi folks,

I have a proposed change for the web site. This patch (see below) will update most of the urls to HTTPS. In many cases there was a redirect; for those I captured the new canonical address.

(Per the https://cygwin.com/contrib.html, this is *not* a change to anything in the winsup directory, which is why I chose the cygwin AT cygwin distro)

The patch can be found here:
https://patch.clifton.io/cygwin/cygwin-htdocs_bsclifton_https_20160424.patch

And can be verified by these checksums:
sha256sum / 9e5c41d303d8d19a411d0f586dbd653cb21abd48d31868631a59e9929351a83b
sha1sum / f17fd3d9d83b3478b16e523f0eb9070a22a2a5df
md5sum / 90ecf222826196a5061753594fcb5846

The tool I used to detect the links (along with an explanation of why https is preferable) can be found here:
https://textslashplain.com/2016/03/17/seek-and-destroy-non-secure-references-using-the-moartls-analyzer/

Thanks,
Brian

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple