Whitehouse Website Let Their SSL Certificate Expire

https://whitehouse.gov/

by dkroy • 11 years ago

10 8 11 years ago

whitehouse.gov

ingler• 11 years ago

But we can trust them with "cyberpolicy".

Someone1234• 11 years ago

No more or less so than yesterday.

"Everyone" has had an certificate issue at one point or another, Microsoft, Google. Apple, and if tech' firms get it wrong then what chance does anyone else have?

pcmonk• 11 years ago

And of course, this is on the same day as their cybersecurity summit at Stanford.

itengelhardt2• 11 years ago

May I recommend to set up the SSL expiry notification using this website: https://www.expeditedssl.com/simple-ssl-scanner/scan?target_... ?

That might help to prevent such incidents in the future.

zrail2• 11 years ago

If you examine the cert, it's not expired. Akamai is serving the wrong cert so there's a hostname mismatch.

itengelhardt2• 11 years ago

the cert on www.whitehouse.gov is down as well (that's where the *.whitehouse.gov cert would fit in nicely). I think the setup is messed up

zrail2• 11 years ago

www is the problem, where Akami is serving their own instead of the whitehouse.gov wildcard. The cert coming in for whitehouse.gov is fine and not expired.

dkroy• 11 years ago

You are right I misread February 2nd, 2016. I am not seeing the hostname mismatch though.

Whitehouse Website Let Their SSL Certificate Expire

Related Stories