Currently thousands of people are going to the White House petition site to sign petitions to secede from the union. The site is "protected" from eavesdropping using SSL encryption, however when you test the SSL implementation, the SSL site supports weak ciphers and old versions of SSL known to be insecure.
Also, since SSL versions 3.0 and below are supported and ciphers have not been restricted to non CBC ciphers, the site is vulnerable to The BEAST attack.
Since this is a government website, the lack of security embarrasses me and my fellow Americans. Please fix these issues right away!



