Fergie's Tech Blog

Has the TSA Outsourced the TSA Traveler Identity Verification Program? - UPDATE

Christopher Soghoian writes on Slight Paranoia:

Browsing TSA's website this evening, I came across a link to the new TSA Traveler Identity Verification Program.

"The TSA Traveler Identity Verification Program is designed to assist those airline passengers who have been delayed or prevented from traveling as a result of TSA's security measures."

Unlike the rest of the TSA website, this is served from a different domain: http://rms.desyne.com/

Which means that a private company is running this site...

The whois database shows as follows:

Administrative Contact, Technical Contact:
Desyne, Inc. dns@DESYNE.COM
Desyne Web Services, Inc.
PO Box 143
Boston, VA 22713
US
(703) 391-2400 fax: (703) 391-2550


Record expires on 21-Mar-2015.
Record created on 20-Mar-1996.
Database last updated on 13-Feb-2007 21:32:10 EST.



This begs the question: Who are these guys, why don't they know how to use SSL and how were they awarded this sweet contract?

More here.

UPDATE: 09:47 PST 02/14/2007: Brian Krebs picked up this story this morning.

UPDATE: 09:54 PST 02/14/2007: So has Ryan Singel over on 27B Stroke 6.

posted by Fergie @ 2/13/2007 08:08:00 PM