FBI tip line and veterans crisis site among 350 federal web addresses exposing visitors to network spies, senator warns
- Sen. Ron Wyden wants CISA and OMB to require Encrypted Client Hello on federal websites and make it a federal contract condition
- His list of 350 CDN-hosted addresses without ECH includes the FBI tip portal, the VA's crisis line, and hotlines for whistleblowers and civil rights complaints
- ECH hides site names only alongside encrypted DNS, does nothing for server breaches, and is already blocked in Russia, where some listed embassy pages are aimed
US Senator Ron Wyden (D-Ore.) wants the federal government to turn on a privacy feature that major web browsers have supported for three years, warning that hundreds of agency web addresses still broadcast the name of the site each visitor uses to anyone watching the network along the way.
In a letterto CISA acting director Nick Andersen and deputy federal chief information officer Thomas Flagg, Wyden asked the two agencies to require Encrypted Client Hello (ECH)...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE