On Apr  2 14:04, David A. Wheeler wrote:
> 	* faq-setup.xml: Document how Cygwin secures installation and
> 	update against man-in-the-middle (MITM) attacks.  Note that
> 	setup embeds a public key to check the signature of setup.ini,
> 	and that setup.ini includes SHA-512 cryptographic hashes.

Applied.


Thanks,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat