1998-06-03 - Re: WinNT C2?

Header Data

From: “William H. Geiger III” <whgiii@invweb.net>
To: Jim Tatz <jtatz@chemistry.ohio-state.edu>
Message Hash: fc1c95181d91740cc4581b7ab41449f6040496e757471fa26de84a1fb7a4b67f
Message ID: <199806030125.UAA009.35@geiger.com>
Reply To: <Pine.GSO.3.93.980602200540.28995A-100000@chemistry.mps.ohio-state.edu>
UTC Datetime: 1998-06-03 01:22:02 UTC
Raw Date: Tue, 2 Jun 1998 18:22:02 -0700 (PDT)

Raw message

From: "William H. Geiger III" <whgiii@invweb.net>
Date: Tue, 2 Jun 1998 18:22:02 -0700 (PDT)
To: Jim Tatz <jtatz@chemistry.ohio-state.edu>
Subject: Re: WinNT C2?
In-Reply-To: <Pine.GSO.3.93.980602200540.28995A-100000@chemistry.mps.ohio-state.edu>
Message-ID: <199806030125.UAA009.35@geiger.com>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

In
<Pine.GSO.3.93.980602200540.28995A-100000@chemistry.mps.ohio-state.edu>,
on 06/02/98 
   at 08:14 PM, Jim Tatz <jtatz@chemistry.ohio-state.edu> said:

>In addition to the converstaion, MS says:
>Microsoft has opted not to include certain components of Windows NT in
>the evaluation process, not because they would not pass the evaluation,
>but to save time by reducing the load on the NSA. Additionally, the
>MS-DOS/Windows on Windows (WOW) system may be treated as a Win32
>application and would therefore not need to be evaluated as part of the
>Trusted Computer Base (TCB). Networking on NT may not have to go through
>the "Red Book," or "Trusted Network Interpretation." It may be enough to
>consider networking to be another subsystem, and therefore only the
>Orange Book would apply. New or modified components and other hardware
>platforms can go through a "RAMP" process to be included in the
>evaluation at a later time. 


Good God what kind of double talk is this? It doesn't need Red Book eval.
and networking can be treated as a sub-system?!? Well I guess the guys
down at NSA just wrote the Red Book (which is significantly larger than
the Orange Book) because they were board.

I would not trust Micky$lop to tell me that the sky was blue and water was
wet let alone trust them to provide *any* form of security product.

- -- 
- ---------------------------------------------------------------
William H. Geiger III  http://users.invweb.net/~whgiii
Geiger Consulting    Cooking With Warp 4.0

Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 5.0 at: http://users.invweb.net/~whgiii/pgp.html
- ---------------------------------------------------------------
 
Tag-O-Matic: Get OS/2 - the best Windows tip around!

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a-sha1
Charset: cp850
Comment: Registered_User_E-Secure_v1.1b1_ES000000

iQCVAwUBNXSmHI9Co1n+aLhhAQEdowP9FsXmZOEk8KMKvgVun8wbMQqIUoGjB3wj
e+dXsPglA/ya2S2+/wwdQFW2UEXvqHYR4MNV8Af/jqnxQgOk//4ZJVUrf+dkd65u
dOfa2eICbFyRg8OgZZgWDXFr1IvgLpcS36U0V+LyebaoyCqI/WsMnx6zcx8qEzHs
iiF7kDJJPmE=
=HBxD
-----END PGP SIGNATURE-----







Thread