[52480] in Cypherpunks
Re: NT's C2 rating
daemon@ATHENA.MIT.EDU (Mike Tighe)
Fri Mar 22 08:16:12 1996
Date: Fri, 22 Mar 1996 07:12:11 -0600
To: cypherpunks@toad.com
From: Mike Tighe <tighe@spectrum.titan.com>
>At 10:21 AM 3/21/96 -0800, David Loysen <dwl@hnc.com> wrote:
>>>The fine print says its insecure as soon as its connected to a network.
>>Ain't nothing fine about that print. An operating system or piece of
>>hardware may be C2 certifiable. But only a complete system in a specific
>>configuration can be certified as C2 compliant. The way I read the orange
>>book, no system with a network connection can ever be C2.
To address that problem, they wrote the Trusted Network Interpretation a few years after the Orange Book
Mike Tighe
tighe@spectrum.titan.com
http://www.tcst.com/~tighe/
