4 ms·
I was looking at the source, and came across this URL: https://gmpg.org/xfn/11 the HTTPS cert isn't signed correctly, and if you accept it, you just get a 4
by pyre 10y ago
I was looking at the source, and came across this URL:
https://gmpg.org/xfn/11
the HTTPS cert isn't signed correctly, and if you accept it, you just get a 404. I decided to see what https://gmpg.org https://gmpg.org is, and (to my surprise) was presented with a login page for RBC.
Looks like all of the pages work over non-secure HTTP, though. Looks like they got hacked?
Maybe some sort of malicious redirect?
From wget:
WARNING: cannot verify gmpg.org's certificate, issued by ‘CN=online.rbcaccessverifcation.fotomateo.com’:
Self-signed certificate encountered.
- developer2 10y agoI followed the same chain of logic as you; certainly looks like gmpg.org has been compromised. The entire root domain that the cert is signed for (fotomateo.com) is on Chrome's phishing block list too. Odds are that gmpg.org never set up https for themselves. Someone hacked their web server and installed a new Apache instance or VirtualHost config for port 443 without them having noticed. In any case, no danger in loading the OP's article.