Pretty much. On a Sony Xperia 1 V and it works great (best phone I’ve ever had). Downside is that the bootlocker for the US version is locked (AT&T thing) so I can’t just put lineageos on it or something, so I’ve been on the lookout for a replacement recently, and the pickings are pretty sparse.

I’m probably gonna have to ride out the stupid Google bullshit for a few months until there is a decent alternative, as the graphene phone from Motorola probably won’t be released this year (and even then it probably won’t have a headphone jack and a micro SD card slot) and pretty much all of the Linux phones available now don’t really meet my needs (also no headphone jack on something like the jolla phone, which as someone used to Linux for years, I know Bluetooth headphones aren’t much of a solid option).

Given the state of a lot of the summaries I’ve seen lately, that is scary.

It’s the tls certificate that proves your website is legit. Without which, you can potentially be a malicious actor that can pose as the website, and when you download the iso, you could unknowingly download something malicious. It’s pretty hard to forget certificate renewal (most of the time there are plenty of reminders sent and warnings given), so the fact that it happened twice was very impressively bad.

Plenty of things, but the most obvious being the two separate instances they had issues with renewing their certs.