From owner-freebsd-security@FreeBSD.ORG  Thu Aug 14 13:51:30 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 5AB6537B401
	for <security@freebsd.org>; Thu, 14 Aug 2003 13:51:30 -0700 (PDT)
Received: from fubar.adept.org (fubar.adept.org [63.147.172.249])
	by mx1.FreeBSD.org (Postfix) with ESMTP id E210643F93
	for <security@freebsd.org>; Thu, 14 Aug 2003 13:51:29 -0700 (PDT)
	(envelope-from mike@adept.org)
Received: by fubar.adept.org (Postfix, from userid 1001)
	id DB49715256; Thu, 14 Aug 2003 13:51:29 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
	by fubar.adept.org (Postfix) with ESMTP id DA73E1524D
	for <security@freebsd.org>; Thu, 14 Aug 2003 13:51:29 -0700 (PDT)
Date: Thu, 14 Aug 2003 13:51:29 -0700 (PDT)
From: Mike Hoskins <mike@adept.org>
To: security@freebsd.org
In-Reply-To: <20030814102846.K4594-100000@daemon.cyberdoom.org>
Message-ID: <20030814135009.L19401@fubar.adept.org>
References: <20030814102846.K4594-100000@daemon.cyberdoom.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Subject: Re: Certification (was RE: realpath(3) et al)
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Aug 2003 20:51:30 -0000

On Thu, 14 Aug 2003, Dan Airinen wrote:
> Should we do actual work first for the OS, and then consider getting the
> certification ?.

certainly, and we're already doing work...  :)

> The more actual work we do, the better we look (and feel ;)).

agreed.

> I guess OpenBSD doesn't have any certification, but still goverments and
> company's uses them.

no, but they've had a lot of '3rd-party' (read, i believe, network
associates) review that we haven't.  (that's mentioned on their website.)

-mrh

--
From: "Spam Catcher" <spam-catcher@adept.org>
To: spam-catcher@adept.org
Do NOT send email to the address listed above or
you will be added to a blacklist!