RE: EXTERNAL: Re: Question - Does PostgreSQL have an Evaluation Assurance Level?

Hi Laurenz,

Thanks for this information. That is correct, we are just ticking off the checkboxes at the moment but I appreciate your feedback.

Thanks again,

Nick

-----Original Message-----
From: Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at>
Sent: Wednesday, May 31, 2023 4:31 PM
To: Mayer, Nicholas J (US) <nicholas(dot)j(dot)mayer(at)lmco(dot)com>; pgsql-general(at)lists(dot)postgresql(dot)org
Subject: EXTERNAL: Re: EXTERNAL: Re: Question - Does PostgreSQL have an Evaluation Assurance Level?

On Wed, 2023-05-31 at 19:51 +0000, Mayer, Nicholas J wrote:
> We found out that while PostgreSQL does not have EAL, the 'Crunchy Data' does have EAL of 2.

I see. I guess you are aware that a closed source fork of PostgreSQL is probably no more secure than the original. But this is more about ticking off checkboxes, right?

Yours,
Laurenz Albe