US Senate website says use HTTP instead of HTTPS
1–10 of 129 posts
Re: US Senate website says use HTTP instead of HTTPS
#2Can someone tell me why this might have been required?
What are the situations which might prompt a developer to make their users use http instead of https?
Re: US Senate website says use HTTP instead of HTTPS
#3Weird, they're hosted on Akamai. Even weirder, it doesn't appear that www.senate.gov supports IPv6.
Re: US Senate website says use HTTP instead of HTTPS
#4Can someone tell me why this might have been required? What are the situations which might prompt a developer to make their users use http instead of https?
Money :p
Re: US Senate website says use HTTP instead of HTTPS
#5Can someone tell me why this might have been required? What are the situations which might prompt a developer to make their users use http instead of https?
What are the situations which might prompt a developer to make their users use http instead of https?
Tracking detailed referrer information from social media, etc. I don't agree with this goal, but it is something that's very important to people running sites with significant social traffic.
Re: US Senate website says use HTTP instead of HTTPS
#6Can someone tell me why this might have been required? What are the situations which might prompt a developer to make their users use http instead of https?
Caching.
Mind you, I don't know if that's the case here; it certainly doesn't seem like caching should be a large priority for this sort of content.
Re: US Senate website says use HTTP instead of HTTPS
#7Well, if you've got nothing to hide...
;)
Re: US Senate website says use HTTP instead of HTTPS
#8Can someone tell me why this might have been required? What are the situations which might prompt a developer to make their users use http instead of https?
At a guess, it was built years ago by an agency selected on the basis of anything other than technical competence. As a result it probably has thousands of hard coded HTTP links and an oddly configured out of date web server.
Given the 'encryption is only used by terrorists' climate, spending the time and money to make it work for https sounds like a hard sell.
No sources, but I have done some work in UK public sector and that kind of story would match.
Re: US Senate website says use HTTP instead of HTTPS
#9Can someone tell me why this might have been required? What are the situations which might prompt a developer to make their users use http instead of https?
Just a wild guess, but if there are non secure assets in the page, this would result in a browser warning, arguably more suspicious looking than this for average users.
As a quick and dirty workaround they may have done this?
Re: US Senate website says use HTTP instead of HTTPS
#10Weird, they're hosted on Akamai. Even weirder, it doesn't appear that www.senate.gov supports IPv6.
What's weird about them not supporting ipv6?