6 ms·
Whitehouse Website Let Their SSL Certificate Expire
- ingler 12y agoBut we can trust them with "cyberpolicy".
- Someone1234 12y agoNo more or less so than yesterday. "Everyone" has had an certificate issue at one point or another, Microsoft, Google. Apple, and if tech' firms get it wrong then what chance does anyone else have?
- pcmonk 12y agoAnd of course, this is on the same day as their cybersecurity summit at Stanford.
- itengelhardt 12y agoMay I recommend to set up the SSL expiry notification using this website: https://www.expeditedssl.com/simple-ssl-scanner/scan?target_domain=www.whitehouse.gov https://www.expeditedssl.com/simple-ssl-scanner/scan?target_... ? That might help to prevent such incidents in the future.
- zrail 12y agoIf you examine the cert, it's not expired. Akamai is serving the wrong cert so there's a hostname mismatch.
- itengelhardt 12y agothe cert on www.whitehouse.gov is down as well (that's where the *.whitehouse.gov cert would fit in nicely). I think the setup is messed up
- zrail 12y agowww is the problem, where Akami is serving their own instead of the whitehouse.gov wildcard. The cert coming in for whitehouse.gov is fine and not expired.
- dkroy 12y agoYou are right I misread February 2nd, 2016. I am not seeing the hostname mismatch though.