How Vulnerable Was Hillary Clinton’s Email?

Gawker found a login page for Hillary Clinton’s private email server which “uses an SSL VPN—a protocol that allows your web browser to create an encrypted connection to a local network from any internet connection—to users to access their email. That sounds secure, and under the right circumstances, for regular users, it can be. But there are two huge problems with using it for the Secretary of State’s communications with her staff and others.”

“First: Anyone in the world with that URL can attempt to log in. It’s unclear what exactly lies on the other side of this login page, but the fact that you could log into anything tied to the Secretary of State’s email is, simply, bad. If the page above is directly connected to Clinton’s email server, a login there could be disastrous… What’s more troubling is the fact that, at least as of yesterday, the server at sslvpn has an invalid SSL certificate. Digital certificates are used to ‘sign’ the encryption keys that servers and browsers use to establish encrypted communications.”