[Cryptography] New free TLS CA coming

Peter Bowen pzbowen at gmail.com
Tue Nov 18 18:35:21 EST 2014


On Tue, Nov 18, 2014 at 2:39 PM, Hanno Böck <hanno at hboeck.de> wrote:
> This all looks quite nice, except one sentence that puzzles me:
> " The automated issuance and renewal protocol will be an open standard
> and as much of the software as possible will be open source."
>
> What the hell does that mean? "As much as possible" sounds to me like
> "not everything". "Not everything open source" sounds not good.
> Why should it be not possible to publish the software that runs this CA?

Can you suggest a HSM that has open source software?  It has to be
either FIPS 140 Level 3 certificated or certificated to meet EAL5 of a
Common Criteria Protection Profile.

Thanks,
Peter


More information about the cryptography mailing list