- How to stream Real Madrid vs. Real Valladolid Friday 10:44 PM
- How to stream Liverpool vs. Arsenal Friday 10:28 PM
- How to stream Manchester United vs. Crystal Palace Friday 10:05 PM
- How to stream Chelsea vs. Norwich City Friday 8:55 PM
- How to stream the 2019-20 Serie A season Friday 8:05 PM
- Tom Brady keeps supplying us with new meme material Friday 5:55 PM
- Emails reveal Facebook’s knowledge of Cambridge Analytica Friday 3:43 PM
- ‘Fast and Furious’ + ‘American Ninja Warrior’ = Netflix’s ‘Hyperdrive’ Friday 3:15 PM
- Trump jokes drop in Dow is because Seth Moulton dropped out of 2020 race Friday 3:13 PM
- What we learned when we visited Mr. B, America’s chonkiest cat Friday 1:46 PM
- Trump’s new plan to fight opioid overdose? This tweet Friday 1:06 PM
- Fitness influencer shamed for ‘sharing numbers’ in weight loss posts Friday 1:04 PM
- The VSCO Girl has always been here Friday 1:01 PM
- Tomi Lahren’s new ‘Freedom’ clothing line is made for meme mockery Friday 12:21 PM
- Taylor Swift’s ‘London Boy’ is a bop, but Brits don’t think her lyrics are accurate Friday 12:02 PM
Numerous government websites can no longer be accessed by the public after their HTTPS certificates expired during the government shutdown.
Those certificates, which allow your connection to the website to be encrypted, help to ensure that no one can alter your data or the website you are visiting.
As noted by U.K.-based internet security company Netcraft, many government websites, including those belonging to “NASA, the U.S. Department of Justice, and the Court of Appeals” have suddenly become “insecure or inaccessible.”
“With around 400,000 federal employees currently furloughed, more than 80 TLS certificates used by .gov websites have so far expired without being renewed,” Netcraft writes. “To compound the situation, some of these abandoned websites can no longer be accessed due to strict security measures that were implemented long before the shutdown started.”
Netcraft argues, however, that despite the inconvenience, the incident shows that many modern browsers, which either restrict access to websites without proper certificates or issue warnings, are working as intended.
“While this behaviour is bound to frustrate some users, in this case, security is arguably better than usability when you can’t have both,” Netcraft adds. “If users were to ignore such warnings, they would be vulnerable to the type of man-in-the-middle attacks that TLS certificates were intended to combat.”
Although many sites appear to be affected by the issue, others are immune to the certificate expiration problem.
TechCrunch’s Zack Whittaker reports that government sites hosted on “cloud.gov, search.gov or federalist.18f.gov” are set up to renew their certificates automatically every three months.
The certificate fiasco comes as President Donald Trump demands Democrats approve a budget with $5.7 billion dollars allocated for a wall on the U.S.-Mexico border. The partial shutdown, which entered its 21st day on Friday, is currently tied for the longest ever lapse in government funding.
Mikael Thalen is a tech and security reporter based in Seattle, covering social media, data breaches, hackers, and more.