SANS NewsBites V 21, No. 096, commented on a report that a key U.S. government site, Regulations.gov, went dark due to an expired TLS site certificate:
Government website for federal rules input shuts off
Alan Levin and Todd Shields, Bloomberg Dec. 9, 2019
The SANS folks point out that everyone with a web site supporting https needs a reliable process for monitoring and updating all site certificates. So, if you are responsible for that task, what do you do use?
=-=-=
Marginally related background info about the site.
The U.S. legal environment is cluttered by thousands of regulations that were not passed as laws by Congress, but are implementing such laws. The agencies responsible for those regs have top put their proposed regulations out for public comment before making them final and enforcing them. That Regulations Site is the onllne way for the public to read and comment on those drafts.
Surprisingly, given the typical government bureaucrat attitude of 'we know what is best for you,' comments on draft regulations regularly do result in changes before going final.
=-=-=-=
Craig
