On Thu, May 8, 2008 at 11:55 AM, Christian Theune <ct@gocept.com> wrote:
Hi everyone,
I have to give an unfortunate update about the Common Criteria (CC) certification.
The CC project began in 2003 to certify Zope 3's security architecture under the conditions of the Common Criteria framework.
We started out as a community effort which turned out not to be a viable solution due to the lack of interest of volunteers and the complexity of the problem space.
gocept restarted the efforts in 2006 and provided a security target document which was given to review and moving pretty good actually. There were very concrete and viable plans for 2008 to finally get the certification wrapped up by end of may.
Unfortunately the project had to be cancelled due to the lack of interest of the sponsoring organisation which went through a major merger. Due to that we're stopping all activities on the certification. If interest in this should come back at some point, we'd be happy to be part of a renewed effort.
Too bad. I think those kinds of certifications aren't of much real use, but it positions you as a serious enterprise player, so it looks good. -- Lennart Regebro: Zope and Plone consulting. http://www.colliberty.com/ +33 661 58 14 64