* Charles(dot)McDevitt(at)emc(dot)com (Charles(dot)McDevitt(at)emc(dot)com) wrote:
> Don't forget that OpenSSL has a FIPS-140 compliant version, and FIPS-140 compliance is essential to many Federal users.
Essential? That's a bit much. Yes, it shows up on a FISMA review as an
open action item, but it's a risk that can both be accepted and
mitigated. I also thought FIPS-140 version required API changes..
> GnuTLS doesn't qualify.
That should be "doesn't currently"..
Thanks,
Stephen