Announcements
Planned Site Maintenance
Due to scheduled maintenance, account creation for new Community users will be unavailable 11 a.m. Eastern October 23, 2020 – October 24, 2020. We apologize for any inconvenience.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Community Champion

Keep Site Cert Current

SANS NewsBites V 21, No. 096, commented on a report that a key U.S. government site, Regulations.gov,  went dark due to an expired TLS site certificate:

Government website for federal rules input shuts off
Alan Levin and Todd Shields, Bloomberg Dec. 9, 2019

 

The SANS folks point out that everyone with a web site supporting https needs a reliable process for monitoring and updating all site certificates. So, if you are responsible for that task, what do you do use?

 

=-=-=

Marginally related background info about the site.

The U.S. legal environment is cluttered by thousands of regulations that were not passed as laws  by Congress, but are implementing such laws. The agencies responsible for those regs have top put their proposed regulations out for public comment before making them final and enforcing them. That Regulations Site is the onllne way for the public to read and comment on those drafts.

Surprisingly, given the typical government bureaucrat attitude of 'we know what is best for you,' comments on draft regulations regularly do result in changes before going final.

=-=-=-=

 

Craig

 

Dr. D. Cragin Shelton, CISSP (D-10)
Dr.Cragin@iCloud.com
https://CraginS.blogspot.com/
My Community Profile
My LinkedIn Profile
href="Not Passing a Cert Exam is Not the Same as Failing" target="new";;https://cragins.blogspot.com/2018/08/pass-rates-for-professional-exams.html