Ah, you're right. It is not illegal. However, a member of Congress who reveals the whistleblower's identity could face legislative sanctions; if a member of the public risks a civil lawsuit from the whistleblower's legal team, which has threatened to hold anyone who reveals the name personally liable if the disclosure results in harm to the whistleblower or the person's family.