3 ms·
The current FIPS-approved OpenSSL module was released in 2023. FIPS compliance does not even allow security patches to address issues. In my opinion, FIPS comp
by ocdtrekkie 9mo ago
The current FIPS-approved OpenSSL module was released in 2023. FIPS compliance does not even allow security patches to address issues.
In my opinion, FIPS compliance is bad security practice and I suspect if a government agency called you on not meeting it, the justification of patching to address known vulnerabilities should hold up to scrutiny.
- firesteelrain 9mo agoNo, you can release another version but it needs to go through the testing and compliance regime which costs money and time. This is the same as certifying an aircraft as airworthy. You can’t build another aircraft and say it is airworthy because the one you just built is airworthy too
- ocdtrekkie 9mo agoClearly Boeing has proven that aircraft certification is much easier to bypass than FIPS certification.
- firesteelrain 9mo agoI know what aircraft you are pointing to (MAX) and new airworthiness compliance measures for all new and existing aircraft are a result of what happened with Boeing