This is historical material “frozen in time”. The website is no longer updated and links to external websites and some internal pages may not work.

Fix The SSL Implementation on petitions.whitehouse.gov!

Created by P.B. on November 13, 2012

Currently thousands of people are going to the White House petition site to sign petitions to secede from the union. The site is "protected" from eavesdropping using SSL encryption, however when you test the SSL implementation, the SSL site supports weak ciphers and old versions of SSL known to be insecure.

Also, since SSL versions 3.0 and below are supported and ciphers have not been restricted to non CBC ciphers, the site is vulnerable to The BEAST attack.

Since this is a government website, the lack of security embarrasses me and my fellow Americans. Please fix these issues right away!

Homeland Security & Defense
Innovation: Arts & Technology
Return to top