Wyden urges federal agencies to enable Encrypted Client Hello
Original title: Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic
His office found at least 350 federal sites without ECH, including an FBI tipline and a VA crisis hotline.
Sen. Ron Wyden asked CISA and OMB on Monday to push Encrypted Client Hello across civilian federal websites. Standard HTTPS still exposes the site name, and he warned eavesdroppers could identify whistleblowers, crime tipsters, and people seeking crisis help. He wants ECH required for agencies and as a condition of federal cloud and network contracts. CISA and OMB had not responded.
Unconfirmed: CISA and OMB had not commented, and the eavesdropping risk is Wyden's warning rather than a reported incident.
- His office identified at least 350 federal sites that do not use ECH.
- An FBI tipline supports ECH but has not enabled it.
- A VA suicide-prevention hotline lacks ECH because Amazon does not support it.
- He also wants ECH support mandatory in federal cloud and network contracts.
- Vendors
- Amazon
- Products
- Encrypted Client Hello
- Countries
- United States
From the original article
3 min read at cyberscoop.com
At risk, the Oregon Democrat warned, are online crime tipsters, whistleblowers and others. The post Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic appeared first on CyberScoop.
By Tim Starks · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.