[aklug] Re: irs.gov: SSL certificate too expensive?

From: Christopher Howard <christopher.howard@frigidcode.com>
Date: Fri Jan 27 2012 - 15:39:08 AKST

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/27/2012 02:58 PM, Erinn Looney-Triggs wrote:
>> --------- To unsubscribe, send email to
>> <aklug-request@aklug.org> with 'unsubscribe' in the message
>> body.
>>
> They are using Akamai's CDN, so the cert is valid for their servers
> and not IRS.gov,this a much more expensive SSL certificate than
> your normal one :).
>
> -Erinn
>

Does Akamai host their site? Presuming that Akamai hosts www.irs.gov,
and presuming that IRS never purchased SSL support, then it would just
be a matter of (mis)configuration that the servers provided a default
certificate when an SSL session was attempted. I actually have this
problem with some of my sites, although I use SSI.

The humorous thing, though, is that www.akamai.org doesn't have a
matching SSL certificate either. :D I think that if I was a company
that sold "security and compliance" solutions, I would get one just
for appearances sake.

- --
frigidcode.com
theologia.indicium.us
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPI0OsAAoJEI2DxlFxTtgd00YH/15MWmuKrg579aPTSr3o9ywf
cPu0HC4raehzl5aKMkvyevDXYJ8ZngUe6zVSnfopQEhSN57SEXeHyk1kVX5igJf0
pQUJkqjr3PYhCETnXRkFry69gAQX7iGG8NnwPwA4OnzBTR22Y5Ckn5mKZHWZGEDb
Da0v9chcGJYT6uAKvqvVOHXkCHQitBioHrBrxiD7pMuTOUHdmAnn2RtLwKU8qaPN
1MMrIASKJCjDg6WcpK2BeG0Jvr2lgwzs6s8ZEori9Q5bsUzF6yy5BCrq3EGgzUfw
BsBXh2BJESCjbg0RItH9ui59SjqgZEMMDJKsua4pOLGTDysAwZZ43DLcrNpIkfs=
=IZT0
-----END PGP SIGNATURE-----
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Fri Jan 27 15:36:56 2012

This archive was generated by hypermail 2.1.8 : Fri Jan 27 2012 - 15:36:56 AKST