> From: Randy Taylor [mailto:gnucharm.net]
> >I agree with you that CC and a process-oriented security approach
> >are different "things" in and of themselves.
>
> They are the same. It seems you haven't understood either of my previous
> messages (sorry, I probably phrased them poorly).
>
> My argument is essentially: Common Criteria Evaluation is an example of
> good process, but it is generally bad -- therefore process is generally
> bad.

We had just heard that ISS was kicked out of the Common Criteria
Evaluation, was this due to your philosophy on CC or was this a result of
something else?

Cheers,

Dolomite

"Its all about the Disco Godfather..."

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]