@marathon Hmm yikes, so the hash on the site is definitely wrong. If they didn't publish the keys anywhere and the keys in the cert don't match any of the older releases that have been publicly verified that's definitely pretty bad.
@marathon Or maybe it's not self signed, I thought it was. That and someone forgetting to update the signature on the site are the only ways that could not be bad that I can think of.
CleverLibre Social is an inclusive social instance for open discussion, learning, and community.
All cultures welcome.
Hate speech and harassment strictly forbidden.