From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from omta002.cacentral1.a.cloudfilter.net (omta002.cacentral1.a.cloudfilter.net [3.97.99.33]) by sourceware.org (Postfix) with ESMTPS id 16CBF3857BA4 for ; Thu, 15 Jun 2023 17:01:05 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 16CBF3857BA4 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=Shaw.ca Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=shaw.ca Received: from shw-obgw-4001a.ext.cloudfilter.net ([10.228.9.142]) by cmsmtp with ESMTP id 9nX8qxfDI6Nwh9qLIqvg7r; Thu, 15 Jun 2023 17:01:04 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=shaw.ca; s=s20180605; t=1686848464; bh=H9+LQdmBKs+cVZ2LPDPJtMRdCCcAfsL9q//YhlGMNoY=; h=Date:Reply-To:Subject:To:Cc:References:From:In-Reply-To; b=u7d0gKIU7Nym5cUViw8rpPhrM9AMLA8gjoKvLXibGm/lS61Qjkex1GqAO1CUEtjJ9 UrzGXUAmxZ2+IuyOzP47Mb0FBY/sE0c6+HZZ9S8yVOuwgKiSlIDCYtO4Kc5STfXdS2 qlHgwSrSTB4TLlchL52tp9bJjPaJCV3pmmA8jHH0i6uGnTHBm0Y9Ug3uM+oTvXDaTP fmjAYayo/7/1e1K+vPIELX7IhyG0YoayzCYb/meukKidiSb2yiIxk45cmHxWR9IJRv Snhz/3RXL4yGQc/UzvNppnhZAKxsVq4oZ8t/dYozyTCU4cXe++ra8f+U0dhe/YcHEC 2bAisZDCnkJEA== Received: from [10.0.0.5] ([184.64.102.149]) by cmsmtp with ESMTP id 9qLHqhNSfHFsO9qLHqlqtx; Thu, 15 Jun 2023 17:01:04 +0000 X-Authority-Analysis: v=2.4 cv=XZqaca15 c=1 sm=1 tr=0 ts=648b43d0 a=DxHlV3/gbUaP7LOF0QAmaA==:117 a=DxHlV3/gbUaP7LOF0QAmaA==:17 a=IkcTkHD0fZMA:10 a=w_pzkKWiAAAA:8 a=McOlyyESAAAA:8 a=2RhXCZcTAAAA:8 a=E8mv_zR_AAAA:8 a=H-U6OJzKAAAA:8 a=AksKwXheXmTrmXZuzP8A:9 a=QEXdDO2ut3YA:10 a=-FEs8UIgK8oA:10 a=sRI3_1zDfAgwuvI8zelB:22 a=UoH3Eknu7Sz4exW7_WxQ:22 a=tkGpvXWc-OKycYeMZIQa:22 a=yEpjcXnXwWMFmBBJCNA9:22 a=n46xXRQbOAz4QNNm_cXZ:22 Message-ID: <166759a7-449e-4eac-7377-985f4db11a7b@Shaw.ca> Date: Thu, 15 Jun 2023 11:01:03 -0600 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.11.2 Reply-To: cygwin@cygwin.com Subject: Re: Identical Cygwin websites - differing downloads Content-Language: en-CA To: cygwin@cygwin.com Cc: happynumnums References: <-ZOAJV_uZC2NPx5GcZA8caT5sxCBmG7bp1eSMaG4JMS2jy343wOyf3KCgGSZDPajHSGNmdxcEm5My5l7SogATe_jn8BoRrENyp_YmVSXQgA=@proton.me> From: Brian Inglis Organization: Inglis In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4xfKpjYhLYTYixcCnB9RQeHCI1SYMa0R7nnBev7oJQzy6HdBn+cybOP+vH71OMR4E1U0ndkoHKaut6zlzIJmyD2jWJcxK++aCyNMTw0+u/blb4rD7UVCit 1XbXqGPGjoAMGiHJOueEkG2KXhJvhDFj4Y5QMY7jDAxDAqQlC32Y0g2XpasiJ7qOBrN8XtrdllQFLskWJOmMYd1IVitW1DMFqwRSbkf8SZ4RU9eh1Q5ek3+D X-Spam-Status: No, score=-2.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,KAM_INFOUSMEBIZ,KAM_LOTSOFHASH,NICE_REPLY_A,RCVD_IN_DNSWL_LOW,SPF_HELO_NONE,SPF_PASS,TXREP,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On 2023-06-15 09:07, marco atzeri via Cygwin wrote: > On Thu, Jun 15, 2023 at 3:20 PM happynumnums via Cygwin > wrote: >> >> When looking for the latest Cygwin installer, I came across two different domains. >> >> One insecure: >> http://cygwin.org/ >> >> and one secure: >> https://cygwin.net/ >> >> When checking the downloaded latest 3.4.6 installer with sha512sum.exe, I get differing checksums from the executables from both websites: >> >> an unexpected checksum (from first site) >> 787c46173f5f91d350d31053f09d2bc18e1a80907a9f571f905fa7579cd2fa7b2502337da57aa70a5c8c4209a365f3604cee3c8ffe6c451b397986ddf17eea14 >> >> and the expected checksum from the 2nd site (as printed on both pages): >> 4779bead277ba7e682212ed3b1c9c2a56f9b15586dc2db3949556958b683b6f8a11c1c8957e1027d798281fcc98ccf12c418a609911c7e553787c88f8af86152 >> >> The first file size shows 1350kB, the 2nd 1356kb. >> >> Can somebody clarify, if cygwin.org is a phishing site or otherwise explain the differences? >> >> Sent with [Proton Mail](https://proton.me/) secure email. >> > > all sites point to the same address and all works with HTTPS > IPv4 address (8.43.85.97) > > https://sitereport.netcraft.com/?url=https://cygwin.net > > problem/cache in the middle ? or Corporate/ISP proxy interfering? As noted in the FAQ and the added footers, cygwin.com appears to be the preferred site, so should be used in preference to alternative aliases to avoid any possible issues. -- Take care. Thanks, Brian Inglis Calgary, Alberta, Canada La perfection est atteinte Perfection is achieved non pas lorsqu'il n'y a plus rien à ajouter not when there is no more to add mais lorsqu'il n'y a plus rien à retirer but when there is no more to cut -- Antoine de Saint-Exupéry