NODE fcc54571Re: WinNT C2?
"Andrew White" <awhite@indigo.ie>Tue, 2 Jun 1998 22:06:40 -0700 (PDT)
Versions are important, too...
Quote from current Microsoft Web site...
"<The NT 3.51 ITSEC> evaluation along with the US TCSEC class C2 evaluation
completed in 1995 for Windows NT 3.5
demonstrates Microsoft's commitment to building a secure operating system
and continuing to provide customers
with assurance of its security characteristics based on these evaluations>"
NT 4.0 has never passed ANY security evaluation. NT 3.51 passed a UK one in
October 1996, NT 3.5 passed C2 in
1995. Both these earlier versions are effectively unusable due to diverse
and numerous bugs unrelated to security,
and both the evaulations were without a network card.
Later,
Andrew.
NODE 3db77c6fRe: WinNT C2? - How about WinNT and some C-4?
Jim Tatz <jtatz@chemistry.ohio-state.edu>Tue, 2 Jun 1998 23:05:48 -0700 (PDT)
> NT 4.0 has never passed ANY security evaluation. NT 3.51 passed a UK one in
> October 1996, NT 3.5 passed C2 in
> 1995. Both these earlier versions are effectively unusable due to diverse
> and numerous bugs unrelated to security,
> and both the evaulations were without a network card.
Surprisingly enough NT4.0 has not received the C2 rating, although I could
have sworn I have seen remarks about Nt4.0 and C2 certification on a
Microsoft page. According to WIRED, NT 4.0 is undergoing testing, and will
supposedly be certified in Oct.
Apparently the gov't isn't too happy with the way MS is bluring the edges
of C2 certification of their products [Which they are buying].
http://www.wired.com/news/news/technology/story/12121.html
-Jim