[Zope] Zope 2.8.x and python security audit
Sven Deichmann
deichmann at werkbank.com
Fri Jan 27 04:35:36 EST 2006
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Well. But when will that be? And when will Plone be ported to Z3? And
when will Plone be certified? ;)
And after all: Is Z3 ready to use? :D
Sven
Andreas Jung schrieb:
>
>
> --On 27. Januar 2006 09:38:12 +0100 Sven Deichmann
> <deichmann at werkbank.com> wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Oh well... no news is not always good news. I could also mean that PHP
>> is much more popular and under more surveillance while python is only
>> good known to professional crackers...
>>
>> The problem is, that in this usecase we won't be able to use Zope if
>> there is no official, independent security certificate for it.
>>
>> Which could lead to such a certificate for Zope, but more likely to a
>> commercial CMS for which a certificate exists.
>>
>> We are talking about a pharmaceutical company that is bound to
>> international regulations regarding software systems in such companies.
>> Especially all Interface functions have to be tested with every possible
>> input.
>>
>
> Then forget about Zope 2 and look at Z3. Zope 3 is currently on the way
> to be certified for the Common Criteria (hope this is the official
> name). You should look through the zope3-dev mailinglist archive for
> details.
>
> -aj
>
- --
- ---------------------------------------------------------------
Information nimmt Gestalt an... - <http://www.werkbank.com>
- ---------------------------------------------------------------
Werkbank Multimedia GmbH * Bergstrasse 152 * 44791 Bochum * GER
Fon: +49(0)234/ 935386-03 * Fax: 935386-06 * mail at werkbank.com
- ---------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkPZ6WgACgkQx3fK1szFYvndFACfX6qA2zE9qcPaZzZMF5JtYVEj
rG8Ani08Ors7gdteo/lweTHEzTeFR0Eh
=Bi0i
-----END PGP SIGNATURE-----
More information about the Zope
mailing list