Read and respond to this message at: https://sourceforge.net/projects/gnuwin32/forums/forum/74807/topic/3423003 By: tml1024
Hmm, I see a slight fault in the logic chain of thought here. First, one person is concerned about a relatively obscure security problem in wget that, as far as I understand, doesn't affect the overwhelming majority of use cases of wget where SSL isn't involved. So, presumably, only slightly paranoid and/or extremely security-conscious people are concerned, including people who actually use wget for download of security-sensitive material from https URLs. Then somebody else provides a fixed executable of wget, hosted on some site nobody has ever heard of, not using https, located in the British Indian Ocean Territory if you believe the TLD, and expects these paranoid and/or extremely security-conscious people to download and use it. I hope you see my point‽ If you are afraid of a vulnerability in wget that means somebody can spoof a SSL certificate, and thus make you download something you didn't intend, shouldn't you be equally afraid of downloading a compiled wget binary provided by some random person on the net, who might have inserted code in it to do something nasty? (And I don't mean just some off-the-shelf malware payload that anti-malware software would notice.) (No offence to raysatiro; I am also just another random person on the net.) --tml ______________________________________________________________________ You are receiving this email because you elected to monitor this forum. To stop monitoring this forum, login to SourceForge.net and visit: https://sourceforge.net/projects/gnuwin32/forums/forum/74807/topic/3423003 ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ GnuWin32-Users mailing list GnuWin32-Users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/gnuwin32-users
