FIPS 140-2

Feature requests for VLC.
mdr2013
New Cone
New Cone
Posts: 1
Joined: 25 Sep 2013 17:26

FIPS 140-2

Postby mdr2013 » 25 Sep 2013 17:32

Hello,

Is the VLC plugin Federal Information Process Standdard (FIPS) 140-2, http://csrc.nist.gov/publications/PubsFIPS.html, compliant? If not, are there any plans to implement it in a future release?

Best regards and thanks in advance :)
mdr2013

Jean-Baptiste Kempf
Site Administrator
Site Administrator
Posts: 37523
Joined: 22 Jul 2005 15:29
VLC version: 4.0.0-git
Operating System: Linux, Windows, Mac
Location: Cone, France
Contact:

Re: FIPS 140-2

Postby Jean-Baptiste Kempf » 27 Sep 2013 01:35

Seriously, noone knows. You cannot expect a group of volunteers to review a 60+ pages document, for a codebase of more than 10 millions lines of code.

VLC is used by many administrations, so either you trust them, or you must do the review of the document, by yourself.
Jean-Baptiste Kempf
http://www.jbkempf.com/ - http://www.jbkempf.com/blog/category/Videolan
VLC media player developer, VideoLAN President and Sites administrator
If you want an answer to your question, just be specific and precise. Don't use Private Messages.

TNZ
New Cone
New Cone
Posts: 5
Joined: 28 Sep 2013 09:10
Operating System: Linux / Sailfish OS

Re: FIPS 140-2

Postby TNZ » 28 Sep 2013 11:18

I agree with Jean Baptiste and I can add informations about FIPS 140-2.

This agreement is used generaly for Host Security Module (HSM) and others professional softwares around payment card industry. FIPS 140-2 is recommended in PCI-DSS requirements for example.

One more thing, FIPS140-2 agreement is the goal of a long procedure where the candidate software can be modified. Those modification are asked by the US administration, the one who delivers the agreement.
--------------------
Jean Baptiste,
Je me demande bien à quoi pourrait servir cette certification dans VLC. De plus, faut fournir les sources, mais surtout apporter des modifs fonctionnellement très discutable par rapport à VLC.

TNZ

Jean-Baptiste Kempf
Site Administrator
Site Administrator
Posts: 37523
Joined: 22 Jul 2005 15:29
VLC version: 4.0.0-git
Operating System: Linux, Windows, Mac
Location: Cone, France
Contact:

Re: FIPS 140-2

Postby Jean-Baptiste Kempf » 28 Sep 2013 11:48

For whatever reasons, some people from va.gov want us to be FIPS 140-2 compliant.

When I said that this was not our job to do so, especially for complex compliance of a foreign countries, they insulted us:
French people are smart butts.
The US military and administration are using VLC for years, but it is not enough for those.

Some people have a hard time understand what volunteer mean.
Jean-Baptiste Kempf
http://www.jbkempf.com/ - http://www.jbkempf.com/blog/category/Videolan
VLC media player developer, VideoLAN President and Sites administrator
If you want an answer to your question, just be specific and precise. Don't use Private Messages.


Return to “VLC media player Feature Requests”

Who is online

Users browsing this forum: No registered users and 11 guests