Subject: FYI: Announcement of a security requirements document for CAs

From: "David A. Cooper" <[email-masked]>
Date: Sat, 06 Nov 1999 14:59:11 -0500

All,

Over the past year, NIST has been working to write a security requirements
document for Certificate Issuing and Management Systems (e.g., CA hardware
and software). The goal of this document is to specify security requirements
(e.g., audit, archive, I&A, etc.) for products that are to be used to issue, revoke
and otherwise manage public-key certificates.

A first draft of the security requirements document is now available from our Web site:

		http://csrc.nist.gov/pki/secreqmts/welcome.html

If you have an opportunity to read this document, we would appreciate any comments
that you may have.

Thank you,
David Cooper