Re: WinNT C2?

17 Dec 2003

      -----BEGIN PGP SIGNED MESSAGE-----

In
<Pine.GSO.3.93.980602200540.28995A-100000@chemistry.mps.ohio-state.edu>,
on 06/02/98 
   at 08:14 PM, Jim Tatz <jtatz@chemistry.ohio-state.edu> said:
...
In addition to the converstaion, MS says:
Microsoft has opted not to include certain components of Windows NT in
the evaluation process, not because they would not pass the evaluation,
but to save time by reducing the load on the NSA. Additionally, the
MS-DOS/Windows on Windows (WOW) system may be treated as a Win32
application and would therefore not need to be evaluated as part of the
Trusted Computer Base (TCB). Networking on NT may not have to go through
the "Red Book," or "Trusted Network Interpretation." It may be enough to
consider networking to be another subsystem, and therefore only the
Orange Book would apply. New or modified components and other hardware
platforms can go through a "RAMP" process to be included in the
evaluation at a later time.
Good God what kind of double talk is this? It doesn't need Red Book eval.
and networking can be treated as a sub-system?!? Well I guess the guys
down at NSA just wrote the Red Book (which is significantly larger than
the Orange Book) because they were board.

I would not trust Micky$lop to tell me that the sky was blue and water was
wet let alone trust them to provide *any* form of security product.

- -- 
- ---------------------------------------------------------------
William H. Geiger III  http://users.invweb.net/~whgiii
Geiger Consulting    Cooking With Warp 4.0

Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 5.0 at: http://users.invweb.net/~whgiii/pgp.html
- ---------------------------------------------------------------

Tag-O-Matic: Get OS/2 - the best Windows tip around!