The Watch Center of the Digital Observatory in Haiti (ObNH) deplores that the website of the Office of Insurance Vehicles Against Third Parties (OAVCT), which offers the possibility of making transactions online at https://e-oavct.gouv.ht/oavctPortal/ is not properly secured, as is unfortunately the case for other websites of the Haitian public administration...

The ObNH states, "Despite the display of the "https" protocol, characteristic of a secure connection, no encryption (SSL or TLS) has been detected. In addition, despite the presence of the "Secured by GeoTrust" tab, the security certificate has expired since December 1, 2018."

Adding "The major concern exists at the level of the payment form hosted on the same site, which does not refer to any "trusted third party ". It is thus possible that the information entered by a taxpayer during a payment by credit card can be used for fraudulent purposes.

Note that ObNH informed OAVCT of this security issue on January 29, 2019, in accordance with the internal protocol governing the matter, which requires notifying the public within 30 days of contacting the principal parties. officials.

Pending a security patch, as well as upgrading the website, the ObNH recommends that taxpayers avoid any data exchange, including financial transactions, from the OAVCT website.

HL/ HaitiLibre