cryptoanarchy.wiki

Arise, you have nothing to lose but your barbed wire fences!

1998-06-03 - Re: WinNT C2?

Header Data

From: Jim Tatz <jtatz@chemistry.ohio-state.edu>
To: cypherpunks@toad.com
Message Hash: 5bc78094b3417b1cb23a4f5902b7d486f5f422163592799e659eeb3b9c2abbd2
Message ID: <Pine.GSO.3.93.980602200540.28995A-100000@chemistry.mps.ohio-state.edu>
Reply To: <199806022355.SAA008.18@geiger.com>
UTC Datetime: 1998-06-03 00:14:27 UTC
Raw Date: Tue, 2 Jun 1998 17:14:27 -0700 (PDT)

Raw message

From: Jim Tatz <jtatz@chemistry.ohio-state.edu>
Date: Tue, 2 Jun 1998 17:14:27 -0700 (PDT)
To: cypherpunks@toad.com
Subject: Re: WinNT C2?
In-Reply-To: <199806022355.SAA008.18@geiger.com>
Message-ID: <Pine.GSO.3.93.980602200540.28995A-100000@chemistry.mps.ohio-state.edu>
MIME-Version: 1.0
Content-Type: text/plain


> A NT machine to meet DOD 5200.28 C2 rating needs to be seriously crippled
> when comapired to normal operation. No removable media, No Modem, No
> Network Connection, hell pluging the dam thing and turning it on probably
> puts it's C2 rating in jepordy.
> 
> The reason M$ downplays their C2 rating is that in average day to day use
> of this OS it does not meet this rating.
> 
> NT has never had any RedBook rating and is not certified for use in a
> secure network.

In addition to the converstaion, MS says:
Microsoft has opted not to include certain components of Windows NT in the
evaluation process, not because they would not pass the evaluation, but to
save time by reducing the load on the NSA. Additionally, the
MS-DOS/Windows on Windows (WOW) system may be treated as a Win32
application and would therefore not need to be evaluated as part of the
Trusted Computer Base (TCB). Networking on NT may not have to go
through the "Red Book," or "Trusted Network Interpretation." It may be
enough to consider networking to be another subsystem, and therefore only
the Orange Book would apply. New or modified components and other hardware
platforms can go through a "RAMP" process to be included in the evaluation
at a later time. 

http://support.microsoft.com/support/kb/articles/q93/3/62.asp
[Isn't it great, you have to register for FREE support?]

-Jim

Thread