On 2018/11/13 20:43, Bob Beck wrote: > I have worked around this, for now, however this is NOT a bug. The > key they are using for the accepted sigalg does not use the right > curve, > So when we check for the curve, we should reject this signature -> > this site is doing it wrong. > > I have disabled the check for now. (meaning we will verify with the > wrong curve) and we'll revisit later depending on how much of a tire > fire related sites are. >
FWIW more "wrong signature type" errors (fixed with the workaround) seen at: https://ccache.samba.org/ https://rspamd.com/
