> On Apr 25, 2016, at 2:33 PM, Nellis, Kenneth <kenneth.nel...@xerox.com> wrote: > > -----Original Message----- > From: Adam Dinwoodie >> ... >> But I agree with Brian: the Cygwin website >> should use https everywhere unless there's some good, specific reason >> why it's a bad idea... > > 1. Did Brian say that? I couldn't find it in the thread. > 2. I would be interested to hear the rationale for such a statement. > Cygwin is open source. What's the point of encrypting?
I’m not sure what being open source has to do with it. It should be encrypted for privacy. Frankly, from what we’ve seen in the last couple of years, plain http: should disappear. It should all be https. (And Adam is exactly correct on the performance; it is a non-issue today and has been for years.) -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple