Archived
TD0533: NIT Technical Decision for FTP_ITC.1 with signed downloads
Publication Date
2020.07.13
Protection Profiles
CPP_ND_V2.1
Other References
FTP_ITC.1
Issue Description
The NIT has issued a technical decision for FTP_ITC.1 with signed downloads Resolution
NDcPP requires exact conformance and HTTP is not among the options provided in the selection for FTP_ITC.1. An HTTP connection is therefore not conformant with the FTP_ITC.1 requirements. For the use case of downloading signed firmware updates, NDcPP doesn't mandate the use of a trusted channel according to FTP_ITC.1. For details please see the resolution for RfI#(2016)57rev2. For further information, please see the NIT interpretation at:
https://www.niap-ccevs.org/Documents_and_Guidance/ccevs/NITDecisionRfi201926.pdf
Justification
See issue descripton |