4 ms·
They could clarify. Besides, it doesn't look like there is any form of SSL being used. Correct me if I'm wrong.
by mercurialshark 13y ago
They could clarify. Besides, it doesn't look like there is any form of SSL being used. Correct me if I'm wrong.
- ma2rten 13y agoconsider yourself corrected. https://www.google.com/search?q=site%3Awww.icc.illinois.gov+inurl%3Ahttps https://www.google.com/search?q=site%3Awww.icc.illinois.gov+...
- mercurialshark 13y agoThat's just for signing in. Perhaps SSL isn't really necessary unless signing in, but I would still think it could facilitate malicious script injections.
- nolok 13y agoRealize that people who sign in on the "commerce comission" website are probably business owners who don't want their sign in information (or other stuff this web site might have from them in their account) to be leaked
- ntakasaki 13y agoAbout a third of the internet uses IIS which is not vulnerable to this bug.
- ntakasaki 13y agoAccording to the source they seem to be using the ASP.NET/IIS stack, which uses Microsoft's SChannel SSL implementation which is not vulnerable to the OpenSSL bug.