Add supplement to FIPS compliance page for documenting known confounding patterns

dotnet / docs

This repository contains .NET Documentation.

https://learn.microsoft.com/dotnet

Creative Commons Attribution 4.0 International

4.21k stars 5.86k forks source link

Open leecow opened 2 months ago

leecow commented 2 months ago

FIPS compliance - .NET Core - .NET | Microsoft Learn describes in general terms how an application can be in FIPS compliance. However, https://github.com/dotnet/runtime/pull/94979 introduces a scenario that could introduce confusion. It might make sense to track such patterns either as an added section to the above doc, or in a supplement.

Opening this issue to discuss and track.

cc @omajid @adegeo

adegeo commented 2 months ago

@Rick-Anderson is the author of that original article. Is this an area you own?

Rick-Anderson commented 2 months ago

@Rick-Anderson is the author of that original article. Is this an area you own?

No, I don't own that area.

I'll do a PR to change author. I originally edited the content and 5 years ago we used to put the editor as the owner.

Unless I get a better suggestion, I'll make @leecow the new owner. I'd be happy to review the PR and suggest edit changes.

I don't remember the PU member who wrote the draft that I edited over 5 years ago.