X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:references:in-reply-to:from:date
	:message-id:subject:to:content-type; q=dns; s=default; b=yN2tt7X
	Jy6D7WuUB0N7J6JT2u8ybn1VbbE1B4tam/3lKf/NbbJrBxSiOMNBT8HhmCVkVHEv
	a4e2y0MCG92iQL0W36PRB9IfJ0+Hcrbg5RmUlxVAJ8v2SA2j0VbXyUbYtv2Y5jyz
	pbNPqZe6UYyriiTONrtgoHcfnVvxuodrqyFo=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:references:in-reply-to:from:date
	:message-id:subject:to:content-type; s=default; bh=sMP1VY8NjCKir
	Ta63Osx+A2RVDY=; b=gSHLn7XKfZK+JOacT44Yqk5qbDfs6equUfPeIIPmRjsPo
	DsaZEJ7237LWRjB7BxrWNXQGDCt5Jwfd8FKovHHucjei3iMMSuxhx8EaR8ELP4UF
	XJGD1XarZGHrdy/dCi2uXRwiurmZ78zKbvy202w465Q3KFqefr17cM80KvlBMI=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-1.5 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=ham version=3.3.1 spammy=burden, HX-Languages-Length:730, person
X-HELO: mail-vs1-f49.google.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;        d=gmail.com; s=20161025;        h=mime-version:references:in-reply-to:from:date:message-id:subject:to;        bh=p2Lh6LgwhqNZPpZXWLdQsTSXtsyG8bWcMpDSuDDcxe0=;        b=h7k3HW/fQv76u71uzgO1RgVgc6zE6Q9rSBt/X9/aPWhH50t7cRUhw8wgVEpvaRVpfg         kfUxK7uGfv34S5JrfSsQB8ILFuMyUhlJEFND7ReQ0F/rCNuvBQw3ukfYFMF0Nzt/C62L         ybcdqyhyHJHBRV2orNX1IwjJopI8hwL493evcQDvzbFQFlwmqnvE4v/WrzytEfNPi3La         E+0T66CGBWHCN/qkIRrJUHIS6BDSSt8/a/ULoz28QDHiE2yx+/znQ92e6MXEKb3ACnt7         nTBgXO3CwSjph4kyYn+mdwIk7GkXyE9ew17cDYXCRaMKSggispUaMkeW69ZG8CdaeRYJ         fv1A==
MIME-Version: 1.0
References: <CANSoFxtW0Jb1M5KfkFGGOxec_D8ysyYCrnk_PXWjHobLDXZauQ AT mail DOT gmail DOT com> <1a840c2e-55ac-0ab4-66c4-a1f6a2c4f81a AT Shaw DOT ca> <CANSoFxtA0vnF1adx4rwyjuMasrVAOGb8hT_Uct-wSdcazj252w AT mail DOT gmail DOT com> <41f12842-ea43-ff63-a660-26ee3b497c63 AT SystematicSw DOT ab DOT ca> <CANSoFxtLzGgcOhrsu4h0eXXnpezB6v17cGwOrqy6SjSvJ__gLA AT mail DOT gmail DOT com> <1b570593-0ec7-0890-26ef-7e7468534f47 AT SystematicSw DOT ab DOT ca> <CANSoFxsq+5OfRH7RF3QdpMSJU-4JAKSCZM-rUUysP5Y3myR0+Q AT mail DOT gmail DOT com> <CAD8GWsu+P_d8RCiibkZ068oRAf8yeu=W5CLFO+ZNXGxjUcBOpw AT mail DOT gmail DOT com> <CANSoFxu7sNUqP3zSKHiFULBrvOkhPFRuc8MyAHojAGFNu-O_xQ AT mail DOT gmail DOT com> <ecebba35-b0d0-b996-8a78-47e0e8d33572 AT SystematicSw DOT ab DOT ca>
In-Reply-To: <ecebba35-b0d0-b996-8a78-47e0e8d33572@SystematicSw.ab.ca>
From: Archie Cobbs <archie DOT cobbs AT gmail DOT com>
Date: Tue, 12 Mar 2019 09:58:34 -0500
Message-ID: <CANSoFxsNHmOEXDvbQC2MevYjYxcfoGH2BK5UhmnuYA44OUg3-Q@mail.gmail.com>
Subject: Re: SSL not required for setup.exe download
To: Brian DOT Inglis AT systematicsw DOT ab DOT ca, cygwin AT cygwin DOT com
Content-Type: text/plain; charset="UTF-8"
X-IsSubscribed: yes

On Tue, Mar 12, 2019 at 9:32 AM Brian Inglis wrote:
> > OTOH, if you download the file over HTTPS..  then your client supports
> > SSL. Which is exactly what I'm saying should be mandatory.
>
> Forcing TLS means blocking anyone who for any reason can not use TLS: this is a
> performance and support burden compared to allowing both HTTP:80 and HTTPS:443.

OK. Personally I have trouble believing any such person exists. That
is, a person who has access to an HTTP client, but not an HTTPS
client, for the one-time operation of downloading setup.exe. What are
they using, a TRS-80?

Anyway no worries, I'm giving up on this issue. Too much inertia around here.

-AC

-- 
Archie L. Cobbs

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple