From c75430cde255dc4c53af38e3dce1edee75bca790 Mon Sep 17 00:00:00 2001
From: Sebastian Stenzel <sebastian.stenzel@gmail.com>
Date: Wed, 11 Mar 2026 23:13:50 +0100
Subject: [PATCH] only trust subdomains of `.cryptomator.cloud`

not `notcryptomator.cloud`
---
 .../cryptomator/ui/keyloading/hub/CheckHostTrustController.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/main/java/org/cryptomator/ui/keyloading/hub/CheckHostTrustController.java b/src/main/java/org/cryptomator/ui/keyloading/hub/CheckHostTrustController.java
index 0aa557aa6..c8dad81aa 100644
--- a/src/main/java/org/cryptomator/ui/keyloading/hub/CheckHostTrustController.java
+++ b/src/main/java/org/cryptomator/ui/keyloading/hub/CheckHostTrustController.java
@@ -32,7 +32,7 @@ public class CheckHostTrustController implements FxController {
 	private static final Logger LOG = LoggerFactory.getLogger(CheckHostTrustController.class);
 	private static final String MESSAGE_SINGULAR_KEY = "hub.checkHostTrust.message";
 	private static final String MESSAGE_PLURAL_KEY = "hub.checkHostTrust.message.plural";
-	private static final String TRUSTED_CRYPTOMATOR_CLOUD_DOMAIN = "cryptomator.cloud";
+	private static final String TRUSTED_CRYPTOMATOR_CLOUD_DOMAIN = ".cryptomator.cloud";
 
 	private final Stage window;
 	private final HubConfig hubConfig;