search

commoncriteria / application

Protection Profile for Application Software
The Unlicense
9 stars 3 forks source link

Req for invocation of TLS functionality #47

Closed jeffblank closed 9 years ago

jeffblank commented 10 years ago

We need requirements to check on the invocation of TLS functionality (which will be platform-specific). For example, actually validating certificates (since most platforms offer APIs that permit TLS session setup without validation). This should work well with our two-tier model for cryptographic services (invoke functionality or make your own).

jeffblank commented 9 years ago

We have this now. Thanks Bailey!