X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:date
	:message-id:subject:from:to:content-type; q=dns; s=default; b=pu
	5iiqqNGpD5eOHxoSR16Prg504t3gwrN2RZCZbw4s+hu+V0W8pFbCs0ymOJRwR939
	R6dj+folEBfAt6T803Bgo68xb1W7eXfifpVIQTi31MZKNj4n9+l97f3BuvcDvWFV
	A2App2RsOq0ZJUHq5HCxYL4bNqtgF2uFtwqiduT6o=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:date
	:message-id:subject:from:to:content-type; s=default; bh=z32OHDlH
	QosFofPqRmLXqzBoUMs=; b=C3GTl85cY+d+p42iZXZD/umNr4LmMGpflkvfFceV
	bMkAdr1eaB8rvqJyg49a6r3+nNddEU3cYmesyOX0xd5K6z3t6ZFO+QklFke3aWju
	xAWxsVE0LF7s6NIm9uhgJeKfUDtxD66UAtkYBuyRJr5lT10D4G+4v+pN5ibUcdGP
	Gfc=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=0.0 required=5.0 tests=AWL,BAYES_50,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2 spammy=Secure, Dinwoodie!, dinwoodie!, bullshit
X-HELO: mail-wm0-f54.google.com
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;        d=1e100.net; s=20130820;        h=x-gm-message-state:mime-version:in-reply-to:references:date         :message-id:subject:from:to;        bh=wJ5sU15PT7HxAq74YHPoXLNmQvBk4rEuLZZfWvbE5MY=;        b=SC2/WgwqrgAahC7m+o0AmC8uOoMbgGsZbGmq9SFvzkn5oGuqRm7+L6dt71XigYkC0I         uFLaZtfVTjnHoEbwU4UVFH3GeV3aHUBgOGOE6yUdrbsK6wvPBdL5ViXGRGp0iRzU7RE7         Kws58JI6Vo8hmm/AQ9zVMVQZ7PDdHt4eK//17ch72xfmU6Bx8N/8rPvH5fJj7ultRtPD         uuBPICARqsSgL5ZHMh08asClgtB4R2QGUL/lcwL06TYSemkTw/YKv8vpOOQl92gTDkNY         Y/ohw7mX2rYR65jAsyLZwFybogX735VaEFaX/1uvPZjoo4LuU019n1szL/eFuQoj4SIw         F8mg==
X-Gm-Message-State: AOPr4FUyvFRfeBHREFhHrz62/QN+TkZdzjnP29G3Tf/KoIftLy0Sh2fOz52oN4Pleazs4ZeS1y5q+h7De7gj8g==
MIME-Version: 1.0
X-Received: by 10.28.135.200 with SMTP id j191mr17339813wmd.54.1461657181906; Tue, 26 Apr 2016 00:53:01 -0700 (PDT)
In-Reply-To: <1591620976.20160425160517@yandex.ru>
References: <BL2PR03MB228A4FE7B2CCA51E5FF5163DF610 AT BL2PR03MB228 DOT namprd03 DOT prod DOT outlook DOT com>	<1074467721 DOT 20160425030008 AT yandex DOT ru>	<BL2PR03MB22817533DCF96CD385BD883DF620 AT BL2PR03MB228 DOT namprd03 DOT prod DOT outlook DOT com>	<48360918 DOT 20160425084918 AT yandex DOT ru>	<20160425124332 DOT GO2345 AT dinwoodie DOT org>	<1591620976 DOT 20160425160517 AT yandex DOT ru>
Date: Tue, 26 Apr 2016 09:53:01 +0200
Message-ID: <CAEhDDbD2-5EJY4Sv0b2j_XcML9=1=ORcsi90M0rZv_Y5n=duEQ@mail.gmail.com>
Subject: Re: Proposed patch for web site: update most links to HTTPS
From: Csaba Raduly <rcsaba AT gmail DOT com>
To: cygwin list <cygwin AT cygwin DOT com>
Content-Type: text/plain; charset=UTF-8

On Mon, Apr 25, 2016 at 3:05 PM, Andrey Repin  wrote:
> Greetings, Adam Dinwoodie!
>
>> Secure connections historically had a high overhead, sure, but that's
>> very rarely the case nowadays.  Certainly my experince of loading the
>> Cygwin web page is that there's no perceptible difference between the
>> http and https versions.  Adam Langley (a senior engineer at Google)
>> wrote an article back in 2010 about how TLS is now computationally
>> cheap[0]; it's only gotten cheaper since.
>
> Typical marketing bullshit.

Using profanity does not make your argument stronger.
The article in question is informative and fairly technical. Just
because it has several paragraphs saying "look at these neat things we
experiment with at Google" does not make it "typical marketing
bullshit".


>> [0]: https://www.imperialviolet.org/2010/06/25/overclocking-ssl.html
>
>> See also https://istlsfastyet.com/, which has a lot of discussion about
>> the impacts of TLS, but the short answer is "yes".
>
> If YOUR experience was positive, mine was always negative, especially with
> cygwin.com, down to being forced to switch to plain HTTP to even load any
> page.
>
(snip)
>> But I agree with Brian: the Cygwin website should use https everywhere
>> unless there's some good, specific reason why it's a bad idea.  And "TLS is
>> slow" hasn't been a good reason for years.
>
> See above.

"One guy doesn't like it" is not a good, specific reason.

Csaba
-- 
GCS a+ e++ d- C++ ULS$ L+$ !E- W++ P+++$ w++$ tv+ b++ DI D++ 5++
The Tao of math: The numbers you can count are not the real numbers.
Life is complex, with real and imaginary parts.
"Ok, it boots. Which means it must be bug-free and perfect. " -- Linus Torvalds
"People disagree with me. I just ignore them." -- Linus Torvalds

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple