denverpilot
Tied Down
Super job FAASafety.gov webmaster. SSL key expired. GoDaddy for registration huh? FAA likes hotties. Haha.
FAAsafety.gov Webmaster FAIL
- Thread starter denverpilot
- Start date
This is the FAA where the head doc said they could be sure it was really you filing your online medical application because you had to verify your email address. 
ScottM
Taxi to Parking
- Joined
- Jul 19, 2005
- Messages
- 42,530
- Location
- Variable, but somewhere on earth
- Display Name
- iBazinga!
- Home Airfield
- 3CK
It is called outsourcing to the lowest bidder. You get what you pay for.
alaskaflyer
Final Approach
- Joined
- Feb 18, 2006
- Messages
- 7,544
- Location
- Smith Valley, Nevada
- Display Name
- Alaskaflyer
- Home Airfield
- KMEV
The FAA has been experiencing web problems ever since I've been a pilot. Incredible number of broken links.
denverpilot
Tied Down
Did the big include "Must keep SSL keys current" and appropriate penalties for letting it lapse?
"Lowest bidder" isn't a problem when the specifications are written correctly. Often the time to write proper specs would take longer than just not outsourcing in the first place.
kimberlyanne546
Final Approach
When I got my letter from the FAA the other day which included my plastic pilot cert, they BRAGGED about their website and asked me to check it out and enjoy all the features!
denverpilot
Tied Down
The website's okay, I suppose. I wouldn't put it up as a contender for best website design ever, but it works.
The SSL key thing is just ultra sloppy system administration, so I notice it more as a sysadmin.
Using GoDaddy... that's just laughable. Don't the Feds have a Certificate Authority of their own that's trusted by browsers?
(I know DoD has their own CA, but their CA key isn't installed by default on a whole bunch of browsers. That's a pain.)
TMetzinger
Final Approach
- Joined
- Mar 6, 2006
- Messages
- 9,660
- Location
- Northern Virginia
- Display Name
- Tim
- Home Airfield
- KJYO/KHEF
Actually, the US Gov't does not have a trusted root implanted in browsers.
I know of quite a few agencies who have Entrust as the root of their CA chain.
denverpilot
Tied Down
I didn't look. Thanks Tim. I'm being lazy tonight.
I'm annoyed that RedHat has decided to do maintenance on their site tonight and their CVE database is off-line. I hope their Marketing department hasn't decided to kill it, it sure looks like what little of their website is working has been taken over by the Marketing weenies.
I have Security work to do... sigh. Got a list of crap from Security at 15:30 on a Friday with a note that they'd like to re-scan some internal out-of-scope machines on Saturday night, so I was (once again) making them a list of everything RedHat already patched years ago. Without their CVE DB, it's a lot slower.
Ugh. Thanks Security guys. Appreciate the reasonable amount of time between notification and implementation. Sigh...
Anyway... I guess the Feds using GoDaddy is better than DigiNotar! (BIG GRIN!)
http://en.wikipedia.org/wiki/DigiNotar
I'm annoyed that RedHat has decided to do maintenance on their site tonight and their CVE database is off-line. I hope their Marketing department hasn't decided to kill it, it sure looks like what little of their website is working has been taken over by the Marketing weenies.
I have Security work to do... sigh. Got a list of crap from Security at 15:30 on a Friday with a note that they'd like to re-scan some internal out-of-scope machines on Saturday night, so I was (once again) making them a list of everything RedHat already patched years ago. Without their CVE DB, it's a lot slower.
Ugh. Thanks Security guys. Appreciate the reasonable amount of time between notification and implementation. Sigh...
Anyway... I guess the Feds using GoDaddy is better than DigiNotar! (BIG GRIN!)
http://en.wikipedia.org/wiki/DigiNotar