Government URLs that don't end in .gov

#1

Post by notmysql_ » Sun, Jul 23, 2023, 4:08 PM UTC

Government URLs that don't end in .gov
github.com

Re: Government URLs that don't end in .gov

#2

Post by seeknotfind » Sun, Jul 23, 2023, 4:20 PM UTC

We need a government root CA more than a government TLD. Domain names aren't even the only thing we should attest.

Re: Government URLs that don't end in .gov

#3

Post by KolmogorovComp » Sun, Jul 23, 2023, 4:23 PM UTC

Title should state "US Government..."

Re: Government URLs that don't end in .gov

#4

Post by [deleted] » Sun, Jul 23, 2023, 4:24 PM UTC

[deleted]

Re: Government URLs that don't end in .gov

#5

Post by rig666 » Sun, Jul 23, 2023, 4:24 PM UTC

A few years ago I was hired on at my local sheriff's department and I was so disappointed that we did not have a dot gov domain.

Re: Government URLs that don't end in .gov

#6

Post by zirgs » Sun, Jul 23, 2023, 4:24 PM UTC

seeknotfind wrote: post #2

We need a government root CA more than a government TLD. Domain names aren't even the only thing we should attest.

It's unlikely for a scammer to get a gov domain.

Re: Government URLs that don't end in .gov

#7

Post by Caligatio » Sun, Jul 23, 2023, 4:25 PM UTC

seeknotfind wrote: post #2

We need a government root CA more than a government TLD. Domain names aren't even the only thing we should attest.

This sounds like a decent idea until you realize that means one of two options:

- A US Government controlled CA root preinstalled on computers. Privacy advocates would be in arms. - Constant untrusted CA warnings when trying to access any government site.

Re: Government URLs that don't end in .gov

#8

Post by Abekkus » Sun, Jul 23, 2023, 4:25 PM UTC

seeknotfind wrote: post #2

We need a government root CA more than a government TLD. Domain names aren't even the only thing we should attest.

GSA had that chance when they wrote the rules for all government services to use https. They didn’t even offer letsencrypt, much less build their own CA. The corporate CAs wanted their cut of more tax money.

Re: Government URLs that don't end in .gov

#9

Post by Miner49er » Sun, Jul 23, 2023, 4:25 PM UTC

KolmogorovComp wrote: post #3

Title should state "US Government..."

It's kind of implied, right? Since .gov is only for the US.

Re: Government URLs that don't end in .gov

#10

Post by graypegg » Sun, Jul 23, 2023, 4:26 PM UTC

I’ve always thought it was weird that the Canadian federal government uses canada.ca almost exclusively. You see a lot of

    https://service-service.canada.ca/sign-up-sinscrire.aspx

.ca is open for registration by anyone, and people are used to seeing that TLD. Combine that with the bilingual super long domain names and every once in a while you’ll see a phishing scam like:

    https://service-service-canada.ca/sign-up-sinscrire.aspx

CIRA could set up a .gov.ca second level or something if they really wanted to keep the .ca, but I don’t think that will happen at this point.

It’s at least consistant in looking like a phishing scam!