Friday, November 21, 2008

WhiteHouse.gov SSL Error?

www.whitehouse.gov uses an invalid security certificate.

The certificate is only valid for a248.e.akamai.net

(Error code: ssl_error_bad_cert_domain)

Really?




In all fairness, this is not implying that the whitehouse.gov site is compromised. But it is poor SSL practice to have a mismatched domain name. And really, can't the white house spring the extra few bucks to get their own certificate?




UPDATE
Jan 24, 09

Looks like they fixed the above issue on Dec 22, 08. However, they introduced a new problem:

whitehouse.gov uses an invalid security certificate.

The certificate is only valid for www.whitehouse.gov

(Error code: ssl_error_bad_cert_domain)







-Michael Coates