[CLUE-Talk] Windows EAL 4.

David Anselmi anselmi at americanisp.net
Thu Dec 12 07:26:01 MST 2002


I hadn't heard, but Win2k SP3 has been certified to EAL 4 under the 
Common Criteria.  That's the follow-on to the Orange Book C2 cert that 
NT had.  Jonathan Shapiro was asked what that means.  His answer is classic:

"Security experts have been saying for years that the security of the 
Windows family of products is hopelessly inadequate. Now there is a 
rigorous government certification confirming this."

Full article at http://catless.ncl.ac.uk/Risks/22.41.html

Dave




More information about the clue-talk mailing list