Re: DSD Approved Products

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--0-1890501141-1142424139=:5861
Content-Type: TEXT/PLAIN; charset=iso-8859-1; format=flowed
Content-Transfer-Encoding: QUOTED-PRINTABLE

On Tue, 14 Mar 2006, Dag-Erling Sm=F8rgrav wrote:

> Timothy Smith <timothy@open-networks.net> writes:
>> it can't be too hard to get on that list. windows 2000 is on there.
>
> Very funny.
>
> Getting a Common Criteria certification requires:
>
> - a big wad of money
> - lots and lots of very boring paperwork
> - an even bigger wad of money
>
> Sadly, Microsoft has that, and we don't.

Having been involved in the certication process for Mac OS X, I know a litt=
le=20
about this process now, and the main thing to understand is that the common=
=20
criteria process is about certifying products from vendors.  We have a=20
product, but we're not actually a vendor.  Vendors are typically the ones t=
hat=20
find the rather large sums of cash required to complete the certification=
=20
process.

That said, we're now at the point where we basically have all the required=
=20
functionality for a CAPP evaluation in 7.x-CURRENT, and I'll be merging the=
=20
audit support to 6.x in the near future.  I had hoped to ship it in 6.1, bu=
t=20
things haven't gone quite as quickly as I hoped.  I'll MFC the security aud=
it=20
support pretty quickly after the 6.1 release now that it has settled out so=
me=20
in CVS HEAD.  There is some additional functional work that needs to be don=
e,=20
but it is generally in progress at this point.

Something we can do to make a CAPP evaluation for FreeBSD easier is to star=
t=20
providing the security target documentation and assurance documentation.=20
That way if a vendor turns up and is interested in certifying, it will be a=
=20
lot easier for them.

Robert N M Watson
--0-1890501141-1142424139=:5861
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
--0-1890501141-1142424139=:5861--