OpenSSL loses FIPS 140-2 Certification (Or Not)
OhHellWithIt writes "Government Computer News reported on Tuesday that OpenSSL has lost FIPS 140-2 certification, only six months after receiving it. It sounds like bad news for those of us who would like to see open source gain more of a foothold in U.S. federal workplaces." Readers have updated this story with an update saying the certification has shifted again.
CERTIFICATION is a SCAM!
It means nothing other than your implementation of an algo is correct. It doesn't mean you used it right.
Tom
Someday, I'll have a real sig.