Legal, can you please either contact whoever is in technical control of policy.wikimedia.org, or forward contact/account information to Operations? The server for this site is vulnerable to a serious TLS flaw ( CVE-2016-2107 ) which was patched and released over a month ago in OpenSSL.
https://www.ssllabs.com/ssltest/analyze.html?d=policy.wikimedia.org
It appears to be running on different servers to the blog which is hosted there:
alex@alex-laptop:~$ host policy.wikimedia.org policy.wikimedia.org has address 192.0.66.2 alex@alex-laptop:~$ host blog.wikimedia.org blog.wikimedia.org is an alias for wikimediablog.wordpress.com. wikimediablog.wordpress.com is an alias for vip-lb.wordpress.com. vip-lb.wordpress.com has address 192.0.79.33 vip-lb.wordpress.com has address 192.0.79.32
WordPress tells me that they have resolved the issue. It looks fixed to me, but this is a bit outside my area of expertise. Do you see anything else we need to do to fully address it? Thanks!