irs.gov SSL is broken

Posted by eof on Sunday December 08, 2013 @06:31PM
from the irs.gov dept.

https://www.irs.gov/

( 6 comments | 18 points | on HN )

Re:irs.gov SSL is broken by sanxiyn on Sunday December 08, 2013 @07:55PM (#6872318)

This is normal. IRS does not run the SSL site on that domain.

You get the same error at https://www.whitehouse.gov/ for example.

[ Parent | on HN ]

Re:irs.gov SSL is broken by aeorgnoieang on Sunday December 08, 2013 @08:43PM (#6872459)

Normal? Why would a server "... identifying itself as a248.e.akamai.net" handle that traffic?

[ Parent | on HN ]

Re:irs.gov SSL is broken by cosjef on Sunday December 08, 2013 @09:01PM (#6872515)

That part of the IRS site is not on Akamai's secure network. Its for HTTP-only sites that don't care if a user gets a scary browser warning before clicking through it, and getting to the site with a mismatched cert.

[ Parent | on HN ]

Re:irs.gov SSL is broken by aeorgnoieang on Sunday December 08, 2013 @08:44PM (#6872462)

... because it's a CDN apparently. Huh!

[ Parent | on HN ]

Re:irs.gov SSL is broken by ryanthejuggler on Monday December 09, 2013 @09:41AM (#6874465)

Normal or not, this is terrible user experience.

[ Parent | on HN ]

Re:irs.gov SSL is broken by advisedwang on Sunday December 08, 2013 @07:56PM (#6872320)

I attempted to find a online form, and was directed to https://sa1.www4.irs.gov/irfof/lang/en/eiaTPstatus.jsp.

It looks like www.irs.gov is not used for secure connections.

[ Parent | on HN ]