Clickability tracking pixel

McAfee Finds County Websites in 13 States Lack Basic Security

The cybersecurity firm found that many counties in a group of electoral battleground states haven't taken measures — encrypting their websites and moving to .gov domains — that protect their credibility.

by / February 5, 2020

Elections — and democratic governments in general — run on trust. So when something undermines voters’ trust, it’s a problem for government.

Enter the Internet. Anybody with a connection can post what they want to online, and pretend to be anybody — including government officials.

That’s part of the reason why state and local governments have been increasingly moving in recent years to improve confidence in their official websites by encrypting them and shifting to .gov domains.

But according to cybersecurity firm McAfee, which just released a dataset on the subject, many counties still don’t do either of those things.

“Whereas websites using .com, .net, .org, and .us in their names are easily accessible to anyone with a credit card from website domain vendors such as GoDaddy.com, acquiring a .gov website name requires that buyers submit evidence to the U.S. government that they truly are buying these names on behalf of legitimate local, county, or state government entities,” wrote McAfee spokesperson Chris Palm in an email. “The lack of .gov in a website name means that no controlling government authority has validated that the website in question is legitimate.”

To study the issue, McAfee gathered data on 13 states that will serve as battlegrounds in the 2020 presidential election — in other words, a group of states that will receive an outsized amount of public attention as November nears.

Across those states, about 54% of county websites had an encrypted front page and 17% had an official website ending in .gov. Just 10% had a website that was both .gov and encrypted.

Counties are largely responsible for running elections, so their credibility is important for that reason, but any lack of validity to their online presence can cause other problems as well. Scammers, for example, have targeted citizens in the past pretending to be government officials in order to convince people to hand over information or money.

“While we have not seen examples of malicious actors spoofing county websites to misinform voters, McAfee does see thousands of phishing campaigns with suspicious Web links sending users to fraudulent sites,” Palm wrote. “The barriers to creating, launching, and managing these as political disinformation campaigns is very low.”

Of the states McAfee studied, Arizona led the pack in terms of the percentage of counties that used .gov addresses (67%), and encrypted domains (80%). In terms of the sheer number of counties, Georgia came out on top — in that state, 39 counties had .gov websites and 98 were encrypted.

States Counties # .GOV % .GOV # HTTPS % HTTPS # BOTH % BOTH # Election .GOV % Election .GOV
Arizona 15 10 66.7% 12 80.0% 9 60.0% 10 66.7%
Florida 67 19 28.4% 42 62.7% 1 1.5% 1 1.5%
Georgia 159 39 24.5% 98 61.6% 26 16.4% 39 24.5%
Iowa 99 11 11.1% 70 70.7% 8 8.1% 9 9.1%
Michigan 83 9 10.8% 54 65.1% 6 7.2% 9 10.8%
Minnesota 87 4 4.6% 50 57.5% 4 4.6% 4 4.6%
Nevada 16 2 12.5% 12 75.0% 1 6.3% 1 6.3%
New Hampshire 10 1 10.0% 7 70.0% 0 0.0% 0 0.0%
North Carolina 100 38 38.0% 59 59.0% 22 22.0% 34 34.0%
Ohio 88 17 19.3% 54 61.4% 14 15.9% 67 76.1%
Pennsylvania 67 11 16.4% 36 53.7% 6 9.0% 10 14.9%
Texas 254 13 5.1% 58 22.8% 5 2.0% 9 3.5%
Wisconsin 72 16 22.2% 46 63.9% 9 12.5% 16 22.2%
All battlegrounds 1117 190 17.0% 598 53.5% 111 9.9% 209 18.7%

Here are maps of the four pieces of information McAfee collected for each state.

Looking for the latest gov tech news as it happens? Subscribe to GT newsletters.

Ben Miller Associate Editor of GT Data and Business

Ben Miller is the associate editor of data and business for Government Technology. His reporting experience includes breaking news, business, community features and technical subjects. He holds a Bachelor’s degree in journalism from the Reynolds School of Journalism at the University of Nevada, Reno, and lives in Sacramento, Calif.

E.REPUBLIC Platforms & Programs