I am not sure who should be contacted, but https://apache.org doesn't match the *.apache.org SSL Certificate and one gets a big fat warning in modern browsers that the site shouldn't be trusted.
I think it needs to be corrected... Cheers -- Niclas Hedhman, Software Developer http://zest.apache.org - New Energy for Java
