3 ms·
Hard to take your article seriously with statements such as "...Levels 1 and 2 of the FIPS140-2 certification are just a marketing gimmick". Even harder to beli
by justhere4beer 11y ago
Hard to take your article seriously with statements such as "...Levels 1 and 2 of the FIPS140-2 certification are just a marketing gimmick".
Even harder to believe Jakob took the time to respond.
- gruez 11y agoHexview provided their reason for believing that. Care to explain why you think otherwise?
- nickodell 11y agoOriginal quote: >That is not a big deal, considering that Levels 1 and 2 of the FIPS140-2 certification are just a marketing gimmick for most electronic devices. They have a point here: technically, the iPhone is FIPS140-1/2 compliant. By itself, that doesn't mean that the device is secure. It does show two important requirements for security.
- justhere4beer 11y agoFIPS isn't trivial. There is a lot of shit crypto on the market, establishing FIPS is not banal. Regardless of FIPS, if not utilized properly, it protects nothing. If utilized correctly, it protects what it needs to. Discounting it show lack of understanding.
- justhere4beer 11y agoA little education goes a long way: http://csrc.nist.gov/groups/STM/cmvp/ http://csrc.nist.gov/groups/STM/cmvp/
- detaro 11y agoThey state they believe the device fulfils these requirements, it just isn't certified. And for many customers, it doesn't matter if it actually has the piece of paper to prove it or not.