From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 48445 invoked by alias); 17 Feb 2016 15:40:43 -0000 Mailing-List: contact overseers-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Archive: List-Post: List-Help: , Sender: overseers-owner@sourceware.org Received: (qmail 48434 invoked by uid 89); 17 Feb 2016 15:40:41 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-98.5 required=5.0 tests=AWL,BAYES_50,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_NONE,USER_IN_WHITELIST autolearn=no version=3.3.2 spammy=postmaster@sourceware.org, postmastersourcewareorg, H*RU:sk:outboun, Hx-spam-relays-external:sk:outboun X-HELO: outbound3e.ore.mailhop.org Received: from outbound3e.ore.mailhop.org (HELO outbound3e.ore.mailhop.org) (54.186.22.84) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES256-GCM-SHA384 encrypted) ESMTPS; Wed, 17 Feb 2016 15:40:40 +0000 X-MHO-User: 63c142ba-d58c-11e5-a023-11ad6df26ed1 X-Report-Abuse-To: https://support.duocircle.com/support/solutions/articles/5000540958-duocircle-standard-smtp-abuse-information X-Mail-Handler: DuoCircle Outbound SMTP Received: from cgf.cx (unknown [173.76.44.96]) by outbound3.ore.mailhop.org (Halon Mail Gateway) with ESMTPA for ; Wed, 17 Feb 2016 15:37:44 +0000 (UTC) Received: from ednor (ednor [192.168.187.5]) by cgf.cx (Postfix) with SMTP id 13265600BC for ; Wed, 17 Feb 2016 10:40:33 -0500 (EST) Received: by ednor (sSMTP sendmail emulation); Wed, 17 Feb 2016 10:40:33 -0500 Date: Wed, 17 Feb 2016 15:40:00 -0000 From: Christopher Faylor To: overseers@sourceware.org Subject: [Klaus@Ethgen.de: Invalid TLSA certificate] Message-ID: <20160217154032.GA724@ednor.casa.cgf.cx> Mail-Followup-To: overseers@sourceware.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.20 (2009-06-14) X-SW-Source: 2016-q1/txt/msg00067.txt.bz2 WFM. Anyone else seeing this? cgf ----- Forwarded message from Klaus Ethgen ----- From: Klaus Ethgen To: postmaster@sourceware.org, webmaster@sourceware.org, info@sourceware.org Subject: Invalid TLSA certificate Date: Wed, 17 Feb 2016 14:43:06 +0100 OpenPGP: id=79D0B06F4E20AF1C; url=http://www.ethgen.ch/~klaus/79D0B06F4E20AF1C.txt; preference=signencrypt Hello, today I found my way to https://sourceware.org/ but my browser stopped delivering of the page as your TLSA key does not match the https key! I suspect that you have a big problem with an man in the middle here. Maybe your hoster intercept your traffic. As your domain is secured with DNSSEC, that scenario is very likely! Regards Klaus Ethgen -- Klaus Ethgen http://www.ethgen.ch/ pub 4096R/4E20AF1C 2011-05-16 Klaus Ethgen Fingerprint: 85D4 CA42 952C 949B 1753 62B3 79D0 B06F 4E20 AF1C ----- End forwarded message -----