Re: [libreoffice-users] Update link leads to websites.libreoffice.org

On 2025-07-09 17:16, jomali wrote:
> The correct website is https://www.libreoffice.org/
> I would avoid the others, since they are likely to be scammers 
> pretending
> to be from libreoffice.
>
> On Wed, Jul 9, 2025 at 5:58 AM Dave Howorth <dave@howorth.org.uk> 
> wrote:
>
> > On Tue, 8 Jul 2025 16:29:13 +0000
> > Schno Sannes <yo.hannes@hotmail.de> wrote:
> >
> > > Hi,
> > > My update information led to "websites.libreoffice.org" but the
> > > certificate on your website shows only "website.libreoffice.org". Is
> > > this a maleware copy or is it legit? Greetings
> >
> > You need to be more precise.
> >
> > If I go to https://websites.libreoffice.org my browser says I have a
> > secure connection and the certificate it displays is valid for the 
> > site
> > and also for whatsnew.libreoffice.org
> >
> > If I go to https://website.libreoffice.org/ my browser says I have a
> > secure connection and the certificate it displays is a different one,
> > valid for that site and many others.
> >
> > So what exactly are you doing?

Both are valid, the websites.libreoffice.org and website.libreoffice.org 
.

Believe the actual landing page for OP was 
https://whatsnew.libreoffice.org/25.2/ and it uses the 
'websites.libreoffice.org' signature.
This web based delivery of a "What's new" page was a TDF approved 
LibreOffice implementation.

IIUC the signatures for these TDF sponsored webpages are now CMS managed 
(Silverstripe) and receive a common SSL/TSL root signature issued via 
"Let's Encrypt" (by ISRG) a reputable certificate authority to be 
trusted.

The sites covered under a certificate will be listed in the "Certificate 
Subject Alternative Names" stanzas, and are managed by the certificate 
owner (TDFs LibreOffice project).

An older CMS implementation (also Silverstripe) uses a different 
'libreoffice.org' signature. The website.libreoffice.org is listed as an 
alternative name for that server.

Your browser will allow you to examine the CN common name and 
alternatives.

The whatsnew site offering is new, but nothing to be overly concerned 
with.

--
Stuart

--
To unsubscribe e-mail to: users+unsubscribe@global.libreoffice.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.libreoffice.org/global/users/
Privacy Policy: https://www.documentfoundation.org/privacy