Обсуждение: Re: EXTERNAL: Re: Question - Does PostgreSQL have an Evaluation Assurance Level?

Поиск
Список
Период
Сортировка

Re: EXTERNAL: Re: Question - Does PostgreSQL have an Evaluation Assurance Level?

От
Laurenz Albe
Дата:
On Wed, 2023-05-31 at 19:51 +0000, Mayer, Nicholas J wrote:
> We found out that while PostgreSQL does not have EAL, the 'Crunchy Data' does have EAL of 2.

I see.  I guess you are aware that a closed source fork of PostgreSQL is probably no more
secure than the original.  But this is more about ticking off checkboxes, right?

Yours,
Laurenz Albe



RE: EXTERNAL: Re: Question - Does PostgreSQL have an Evaluation Assurance Level?

От
"Mayer, Nicholas J"
Дата:
Hi Laurenz,

Thanks for this information. That is correct, we are just ticking off the checkboxes at the moment but I appreciate
yourfeedback.
 

Thanks again,

Nick


-----Original Message-----
From: Laurenz Albe <laurenz.albe@cybertec.at> 
Sent: Wednesday, May 31, 2023 4:31 PM
To: Mayer, Nicholas J (US) <nicholas.j.mayer@lmco.com>; pgsql-general@lists.postgresql.org
Subject: EXTERNAL: Re: EXTERNAL: Re: Question - Does PostgreSQL have an Evaluation Assurance Level?

On Wed, 2023-05-31 at 19:51 +0000, Mayer, Nicholas J wrote:
> We found out that while PostgreSQL does not have EAL, the 'Crunchy Data' does have EAL of 2.

I see.  I guess you are aware that a closed source fork of PostgreSQL is probably no more secure than the original.
Butthis is more about ticking off checkboxes, right?
 

Yours,
Laurenz Albe