Is HealthCare.gov Secure Enough?

[Greg Bernhardt]

What does everyone think about the security concerns over the website? It appears to be in question. It certainly will be a major target for hackers and so far the website doesn't have a good track record.

"When you develop a website, you develop it with security in mind. And it doesn't appear to have happened this time," said David Kennedy, a so-called "white hat" hacker who tests online security by breaching websites. He testified on Capitol Hill about the flaws of HealthCare.gov last week.

"When you look at the site itself, it could be really good. It could do really well. They're just not building the security into the site itself," said Kennedy. "Putting your information on there is definitely a risk."

http://www.cnbc.com/id/101225308

 

[mheslep]

There have already been some serious security breaches reported.

Midlands man has personal information compromised on healthcare.gov

Instead of being forthcoming about these security problems, if the government attempts more obfuscation and denial I suspect those problems will get worse.

 

[SteamKing]

Hmmm ... little or no security designed into the site, no payment back end to process premiums, using a contractor with a dodgy record of performance to implement the site, it's almost like healthcare.gov was designed to fail.

The government has a different concept of security. It wants to keep all sorts of things secret when it deals with the public at large, but it grows suspicious if the public at large wants to retain a modicum of privacy from the intrusions of government.