Thanks for the explanation. On Thu, Jul 10, 2025 at 7:04 AM V Stuart Foote <[email protected]> wrote:
> On 2025-07-09 17:16, jomali wrote: > > The correct website is https://www.libreoffice.org/ > > I would avoid the others, since they are likely to be scammers > > pretending > > to be from libreoffice. > > > > On Wed, Jul 9, 2025 at 5:58 AM Dave Howorth <[email protected]> > > wrote: > > > >> On Tue, 8 Jul 2025 16:29:13 +0000 > >> Schno Sannes <[email protected]> wrote: > >> > >> > Hi, > >> > My update information led to "websites.libreoffice.org" but the > >> > certificate on your website shows only "website.libreoffice.org". Is > >> > this a maleware copy or is it legit? Greetings > >> > >> You need to be more precise. > >> > >> If I go to https://websites.libreoffice.org my browser says I have a > >> secure connection and the certificate it displays is valid for the > >> site > >> and also for whatsnew.libreoffice.org > >> > >> If I go to https://website.libreoffice.org/ my browser says I have a > >> secure connection and the certificate it displays is a different one, > >> valid for that site and many others. > >> > >> So what exactly are you doing? > >> > > Both are valid, the websites.libreoffice.org and website.libreoffice.org > . > > Believe the actual landing page for OP was > https://whatsnew.libreoffice.org/25.2/ and it uses the > 'websites.libreoffice.org' signature. > This web based delivery of a "What's new" page was a TDF approved > LibreOffice implementation. > > IIUC the signatures for these TDF sponsored webpages are now CMS managed > (Silverstripe) and receive a common SSL/TSL root signature issued via > "Let's Encrypt" (by ISRG) a reputable certificate authority to be > trusted. > > The sites covered under a certificate will be listed in the "Certificate > Subject Alternative Names" stanzas, and are managed by the certificate > owner (TDFs LibreOffice project). > > An older CMS implementation (also Silverstripe) uses a different > 'libreoffice.org' signature. The website.libreoffice.org is listed as an > alternative name for that server. > > Your browser will allow you to examine the CN common name and > alternatives. > > The whatsnew site offering is new, but nothing to be overly concerned > with. > > -- > Stuart > -- To unsubscribe e-mail to: [email protected] Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette List archive: https://listarchives.libreoffice.org/global/users/ Privacy Policy: https://www.documentfoundation.org/privacy
