DPS Website Change

[jmorris]

Howdy,

I'm new to posting, but after going to Texas Online and poking around, I found this "TexasOnline was established by the Texas Department of Information Resources (DIR) and is managed by Texas NICUSA, LLC." (link: http://www.texasonline.com/portal/tol/en/about-us" onclick="window.open(this.href);return false;).

I take that to mean Tx DIR was at some point handed "techie stuff" from various other departments, then turned around and out-sourced it or parts of it to yet another group. So, though testing may or may not have happened on the DPS side, it also may or may not have happened on the side of "Texas NICUSA, LLC." I'm happy that it is secure now, but out of general curiosity I think I'll poke around some more.

From a press release:
August 03, 2009
AUSTIN: The Texas Department of Information Resources (DIR) has selected Austin-based Texas NICUSA, part of the NIC family of companies, to manage TexasOnline, the state's Internet portal, under a new seven-year contract beginning July 31, 2009. TexasOnline offers more than 850 services, including driver license renewals and vital records information, to 2.4 million visitors every month and has processed more than $12 billion in transactions since inception in 2000.

Texas NICUSA will maintain current services and leverage what has been termed "the next generation" of web design and tools to the site. Through expanded use of Web 2.0 tools such as streaming videos, podcasts, and blogs and improved navigation and search features, Texas citizens will have easier access to government services.

[txfan]

Just looked at the site. Much better info given. Nice job DPS.

Didn't notice HTTPS on the log-in.

Even if no one else caught it, I understand your point.

For everyone else: this is not a secure connection. If you're typing in your "DL#, SSN# and DOB", you're sending it in the clear, subject to interception.

Bad, bad form by DPS to offer this change without SSL.

Thanks chabouk... maybe I lean towards being over-cautious but I look for these things to protect my identity.

I just sent the following email and got a response in about 3 minutes



The website was recently updated as of May 1st. The site is secure.

CONFIDENTIALITY NOTICE: The information contained in this email transmission is confidential. It may also be subject to certain privileges. This information is provided based on a specific fact situation and is intended for the exclusive use of the addressee(s) named above. If you are not the intended recipient, you are hereby notified that any use, disclosure, dissemination, distribution (other than to the addressee(s) named above), copying, or the taking of any action based on this information is strictly prohibited. If you received this information in error, please immediately notify us by return email and delete this message.

Rene M.
Customer Service Representative I
Concealed Handgun Licensing Bureau

From: Cy
Sent: Tuesday, May 04, 2010 4:03 PM
To: CHLS
Subject: the new website
https://www.texasonline.state.tx.us/txapp/txdps/chl/" onclick="window.open(this.href);return false;
This website appears to be unsecure. Why are you no longer requiring my PIN to check my appl. status? Why is there no "status" information?
Is the site secure or not? i've typed in my info and realized i might have just given my i.d. "to the world"
please calm my fears.
thanks

cy

[UpTheIrons]

The website was recently updated as of May 1st. The site is secure.

Rene M.
Customer Service Representative I
Concealed Handgun Licensing Bureau

Ah, Rene continues to be the epitome of brevity and non-informative-ness. Nice to see that not all has changed in Austin!

I like how the rest of your questions went unanswered, too.

[Charles L. Cotton]

Just looked at the site. Much better info given. Nice job DPS.

Didn't notice HTTPS on the log-in.

Even if no one else caught it, I understand your point.

For everyone else: this is not a secure connection. If you're typing in your "DL#, SSN# and DOB", you're sending it in the clear, subject to interception.

Bad, bad form by DPS to offer this change without SSL.

See this thread. It wasn't DPS, it was Texas Online and it's been fixed. http://www.texaschlforum.com/viewtopic. ... 89&start=0" onclick="window.open(this.href);return false;

Chas.

[Fire1141]

Anyone know if the new site is updated "real time" or does it have a lag?

[Quahog]

Just looked at the site. Much better info given. Nice job DPS.

Didn't notice HTTPS on the log-in.

Even if no one else caught it, I understand your point.

For everyone else: this is not a secure connection. If you're typing in your "DL#, SSN# and DOB", you're sending it in the clear, subject to interception.

Bad, bad form by DPS to offer this change without SSL.

Thanks chabouk... maybe I lean towards being over-cautious but I look for these things to protect my identity.

I just sent the following email and got a response in about 3 minutes


The website was recently updated as of May 1st. The site is secure.

CONFIDENTIALITY NOTICE: The information contained in this email transmission is confidential. It may also be subject to certain privileges. This information is provided based on a specific fact situation and is intended for the exclusive use of the addressee(s) named above. If you are not the intended recipient, you are hereby notified that any use, disclosure, dissemination, distribution (other than to the addressee(s) named above), copying, or the taking of any action based on this information is strictly prohibited. If you received this information in error, please immediately notify us by return email and delete this message.

Rene M.
Customer Service Representative I
Concealed Handgun Licensing Bureau

From: Cy
Sent: Tuesday, May 04, 2010 4:03 PM
To: CHLS
Subject: the new website
https://www.texasonline.state.tx.us/txapp/txdps/chl/" onclick="window.open(this.href);return false;
This website appears to be unsecure. Why are you no longer requiring my PIN to check my appl. status? Why is there no "status" information?
Is the site secure or not? i've typed in my info and realized i might have just given my i.d. "to the world"
please calm my fears.
thanks

cy

I found that rather amusing since I wrote them when it was apparent SSL was not enabled and it took them 2 days to respond with the following:

"thank you for your email to TexasOnline. Our site is a secure site, if you have any questions please feel free to contact us at 1-877-452-9060"

That was after I read Charles' post that they fixed it.

[TLE2]

I noticed it. I wanted to change my address (just moved), so I logged on (old site) and realized I don't know which box contains the letter with my PIN.

So I e-mail the office to have them send me my PIN. They do, so I log back in to change address... now you don't need a PIN to do that.