- Timmy Thick blasted for saying the N-word in comeback video Today 9:11 AM
- Netflix’s ‘The Confession Killer’ is a devastating and well-built portrait of a con artist Today 8:00 AM
- Swipe This! I’m ashamed to tell anyone about my online shopping habit Today 6:00 AM
- UPS facing backlash for thanking police after employee killed in shootout Saturday 5:02 PM
- Sanders campaign fires staffer after anti-Semitic, homophobic tweets surface Saturday 3:13 PM
- Brother Nature was attacked, says everyone just watched with phones out Saturday 2:45 PM
- Ryan Reynolds’ gin company hires Peloton wife for ad Saturday 1:24 PM
- Ex-vegan YouTuber accused of fraud after following meat-only diet Saturday 1:11 PM
- The 15 best Disney+ hidden gems and deep cuts Saturday 12:23 PM
- Everyone in GoFundMe scam involving homeless veteran has now pleaded guilty Saturday 12:06 PM
- Boy invites kindergarten class to his adoption–and people are emotional Saturday 11:56 AM
- Reddit links leaked trade deal documents to Russian campaign Saturday 10:44 AM
- How to stream Alistair Overeem vs. Jairzinho Rozenstruik Saturday 8:30 AM
- Amazon sends customers condoms and soap instead of Nintendo Switch Saturday 8:28 AM
- How to live stream Jermall Charlo vs. Dennis Hogan Saturday 8:00 AM
Numerous government websites can no longer be accessed by the public after their HTTPS certificates expired during the government shutdown.
Those certificates, which allow your connection to the website to be encrypted, help to ensure that no one can alter your data or the website you are visiting.
As noted by U.K.-based internet security company Netcraft, many government websites, including those belonging to “NASA, the U.S. Department of Justice, and the Court of Appeals” have suddenly become “insecure or inaccessible.”
“With around 400,000 federal employees currently furloughed, more than 80 TLS certificates used by .gov websites have so far expired without being renewed,” Netcraft writes. “To compound the situation, some of these abandoned websites can no longer be accessed due to strict security measures that were implemented long before the shutdown started.”
Netcraft argues, however, that despite the inconvenience, the incident shows that many modern browsers, which either restrict access to websites without proper certificates or issue warnings, are working as intended.
“While this behaviour is bound to frustrate some users, in this case, security is arguably better than usability when you can’t have both,” Netcraft adds. “If users were to ignore such warnings, they would be vulnerable to the type of man-in-the-middle attacks that TLS certificates were intended to combat.”
Although many sites appear to be affected by the issue, others are immune to the certificate expiration problem.
TechCrunch’s Zack Whittaker reports that government sites hosted on “cloud.gov, search.gov or federalist.18f.gov” are set up to renew their certificates automatically every three months.
The certificate fiasco comes as President Donald Trump demands Democrats approve a budget with $5.7 billion dollars allocated for a wall on the U.S.-Mexico border. The partial shutdown, which entered its 21st day on Friday, is currently tied for the longest ever lapse in government funding.
Mikael Thalen is a tech and security reporter based in Seattle, covering social media, data breaches, hackers, and more.