Submission + - Ohio ID theft verification site not encrypted
Apher writes: The State of Ohio recently had one of their backup tapes stolen from an intern's car. As a result, they've setup a site where those impacted can submit the last four of their social and their name to verify if their data was on the tape. ( http://ohio.gov/idprotect/lookup/lookup.aspx ) The lookup site offers no encryption. Ohio IT's second stated goal: "Be the provider of choice for Ohio governmental information technology by identifying, procuring, providing and supporting (where appropriate) reliable, secure, optimally performing products, services, and infrastructure that encourage the use of common technology." if they don't find this to be an appropriate time to deploy some basic security, when will they?