[Cscwg-public] FIPS 140-3 and the CSBRs
martijn.katerbarg at sectigo.com
Fri Jul 7 19:39:04 UTC 2023
This was indeed discussed on a recent call. You'll find a reference to it in the April 20, 2023
From: Cscwg-public <cscwg-public-bounces at cabforum.org> on behalf of Tim Hollebeek via Cscwg-public <cscwg-public at cabforum.org>
Sent: Friday, July 7, 2023 8:32:49 pm
To: cscwg-public at cabforum.org <cscwg-public at cabforum.org>
Subject: [Cscwg-public] FIPS 140-3 and the CSBRs
CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.
A colleague at another company asked me about the acceptability of FIPS 140-3 and its acceptability for the CSBRs, namely whether “FIPS 140-3 level 2” should be interpreted as being “at least FIPS 140-2 level 2”. This is especially relevant now that it is no longer possible to obtain a new FIPS 140-2 certification.
I think we discussed it at some point, but couldn’t find any information in a quick search.
I can’t imagine any reason why the answer isn’t “YES”, but I wanted to check if anyone else had a different opinion.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Cscwg-public