His server will go out and grab the unique identity (SHA1 hash) of the security certificate of the web site you want to check. If the number Gibson's site shows is the same as the number your browser shows then you are connected to the genuine website, not a fake one.
Related resource:…
Related resource:
To check the authenticity of a secure web connection your device is making (any starting with httpS://) use this page by tech guru Steve Gibson:
https://www.grc.com/fingerprints.htm
His server will go out and grab the unique identity (SHA1 hash) of the security certificate of the web site you want to check. If the number Gibson's site shows is the same as the number your browser shows then you are connected to the genuine website, not a fake one.