Re: [OVC-discuss] Should OVC adopt the OASIS EML standard?

From: Greg Christopher <stork_at_electronify_dot_com>
Date: Fri Feb 02 2007 - 13:53:02 CST

       My name is Greg Christopher and I am a software manager at
Adobe. My group actually handles penetration testing (among other
things) for Adobe Acrobat...

On Feb 1, 2007, at 11:19 AM, Alan Dechert wrote:

> The other service mark will be "OVC Tested." We are not yet
> prepared to
> offer that. This will involve some real testing and will cost some
> money.
> Ultimately, I envision this service mark will be good enough to
> count for
> state certification and federal certification. Obviously, OVC will
> have to
> become an authorized federal test lab for that. This may take a
> while to
> get there (a year or two minimum). I also think that "OVC Tested"
> could
> work for state certification (for CA and/or other states) before we
> become a
> federal test lab.

My 2 cents:
Given the small number of vendors, establishing a "permanent lab" or
"testers" might not be economically viable. On the other hand,
maintaining a supervisory role over contractors who do that work
seems feasible. Although Adobe does their own pen testing, in the
past most of that work was done by contract. Even today a portion of
it is handled that way. Our feeling is the more eyes the better.


OVC-discuss mailing list

= The content of this message, with the exception of any external
= quotations under fair use, are released to the Public Domain
Received on Wed Feb 28 23:17:05 2007

This archive was generated by hypermail 2.1.8 : Wed Feb 28 2007 - 23:17:27 CST