Chandigarh Government Portals Lack HTTPS Security, Risking Citizen Data
Chandigarh Government Portals Lack HTTPS Security

Chandigarh Government Websites Expose Citizens to Cyber Risks on Safer Internet Day

As the global community marked Safer Internet Day 2026 under the theme "Smart Tech, Safe Choices," a concerning review of several official Chandigarh administration websites has uncovered significant cybersecurity vulnerabilities. Multiple key government portals continue to operate without Hypertext Transfer Protocol Secure (HTTPS) encryption, the universally recognized standard for secure web communication.

Critical Public Services Operating on Insecure Connections

Several portals managing sensitive public services remain accessible only through insecure HTTP connections. These include websites handling student admissions and prison-related payments, potentially exposing citizens to identity theft, financial fraud, and unauthorized data interception. Without HTTPS encryption, data transmitted between users' browsers and these websites can be easily stolen or altered, particularly when accessed through public Wi-Fi networks commonly found in cyber cafes, railway stations, and libraries.

Modern web browsers automatically flag such unsecured sites with "Not Secure" warnings, which significantly undermines public trust in government digital services. This technical oversight creates a dangerous contradiction where citizens are encouraged to use digital platforms while those very platforms fail to meet basic security standards.

Higher Education and IT Department Portals Among Vulnerable Sites

One of the most alarming examples involves the Department of Higher Education (DHE) portal, which manages centralized undergraduate admissions across Chandigarh. Despite processing thousands of sensitive student documents annually, this critical platform still lacks HTTPS protection. Students routinely upload confidential materials including:

  • Class 10 and 12 marksheets
  • Aadhaar card copies
  • Migration certificates
  • Personal photographs
  • Digital signatures

Equally concerning is the website of the Society for Promotion of IT in Chandigarh (SPIC), an organization operating under the Information Technology department. This body, which should exemplify cybersecurity best practices, was also found operating without proper encryption, raising serious questions about oversight and adherence to fundamental digital security protocols.

Additional Security Concerns and Expert Criticism

Beyond the encryption deficiencies, several official portals contain broken or outdated links that redirect users to non-functional pages or error messages. Cybersecurity experts warn that such redirections can mislead users to unverified destinations, further increasing exposure to security risks and potential phishing attacks.

Cyber and digital privacy advocate Rajavikrant Sharma has characterized this situation as a governance failure. "A 'Smart City' cannot be built on insecure digital infrastructure," Sharma emphasized. "By leaving critical portals unsecured, the administration is exposing the personal data of its most vulnerable citizens. We cannot genuinely celebrate 'Safer Internet' initiatives while our digital doors remain wide open to potential breaches."

Sharma further noted that the Ministry of Home Affairs' Cyber Safety Handbook explicitly advises citizens, particularly students, to avoid entering personal information on websites lacking HTTPS encryption. "It represents a serious systemic lapse that citizens are effectively forced to violate national cyber safety guidelines simply to access essential government services like admissions portals," he added.

Administration Response and Ongoing Examination

In response to these security concerns, Nitish Singla, Director of Information Technology for the Chandigarh administration, confirmed that the matter is under active examination. "The situation is being thoroughly reviewed, and appropriate action will follow based on our findings," Singla stated, acknowledging the need for immediate attention to these cybersecurity shortcomings.

The persistence of these vulnerabilities highlights the gap between cybersecurity awareness campaigns and actual implementation, particularly within government digital infrastructure. As Chandigarh positions itself as a technologically advanced city, these security lapses present both immediate risks to citizen data and long-term challenges to digital governance credibility.