News for hackers. Stuff that matters.
Re:US Senate website says use HTTP instead of HTTPS by shmapf on Friday May 06, 2016 @02:35AM (#11642103)
Just a wild guess, but if there are non secure assets in the page, this would result in a browser warning, arguably more suspicious looking than this for average users. As a quick and dirty workaround they may have done this?
Re:US Senate website says use HTTP instead of HTTPS by akira2501 on Friday May 06, 2016 @02:49AM (#11642167)
Interestingly, some of the subdomains like https://www.budget.senate.gov/ use the same certificate and do allow you to load their pages with mixed sources. If this was the idea, it was done fairly shoddy.. more than a few sites in the 'Alternative Name' field will still load.