In a press release earlier today, John Weathersby, Executive Director of the
Open-Source Software Institute (OSSI) announced progress on getting the core
cryptographic module of OpenSSL, which has been designated "OpenSSL
Cryptographic Module v1.0," certified by the National Institute of Standards
and Technology (NIST). Details and a FAQ are here.
Validation of this code is significant, because it's the first validation
applicable at the source code level. By validating this source code, the door
is opened to lower cost applications that require cryptography. The
validation process is fairly long and complex, but the code has been
submitted to the testing lab, and the vendor evidence package is expected to
be at NIST at the beginning of the new year.
It's interesting to note that validation requires a certain level of
stability for the code, not a feature commonly as... (more)
U R G E N T A P P E A L
Distributed Denial of Service Attacks against SCO, or anyone for that matter,
are a clearly unacceptable activity. While many in the Open Source community
are not pleased with SCO's lawsuit against IBM, or their proposed legal
challenges aimed at Linux users, these DDoS attacks do not promote the Open
Source cause, and are not consistent with Open Source values. The Open Source
community is based on the notion that principals of free speech should be
applied to software development. DDoS attacks clearly deny the victim the
ability to communicate freely ... (more)