Cygwin setup packages spoofing

Package source authentity is not checked during installation procedure...