Trusting the U.S. Government
by Niel M. Bornstein
Related link: http://myballot.mil/
I'm no security expert, but if I were in the military and wanted to obtain an absentee ballot for the upcoming presidential election, it would bother me to get the following message while viewing the official website:
Switching over to Firefox, you can see that the U.S. Department of Defense is not a trusted certificate issuer.
It may be that computer users in the military do trust the Department of Defense implicitly, but I just don't know for sure.
Who do you trust?
The DOD CA certificate is not installed in browsers as a trusted CA by default, so the certificates it issues are not trusted by default either.
DOD Root Certificates
The DOD issues their own client and server certificates rather than rely on a commercial entity's infrastructure. As aristotle said, the DOD's root CA's aren't installed in most browsers by default. However, the root CA's can be downloaded from several DOD websites, one of which is the Navy's infosec site (https://infosec.navy.mil/PKI/pki_tip.html).