This is a migrated thread and some comments may be shown as answers.

FIPS 140-2 compliant

1 Answer 122 Views

General Discussions

This is a migrated thread and some comments may be shown as answers.

1 Answer, 1 is accepted

answered on 16 Apr 2010, 06:12 PM

Hello Tyson McCall,

Thanks for asking. There is no straight answer. It depends on how you define what is/isn't FIPS-2 compliant. Here are some facts to help clarify:

WebUI Test Studio has not been submitted for FIPS-2 certification.
WebUI Test Studio does not perform any sort of network communication. It does automate driving of a browser, which of does communicate with a web server over a network. We are not sensitive to encryption in that network communication because we leave it up to the browser to encrypt/decrypt the network communication.
WebUI Test Studio stores all of its tests and configuration data in plan text or XML files on disk. If a test contains passwords, the passwords can be seen in plain text by looking at the test file in a simple text editor. You could use an Encrypting File System to be FIPS-2 compliant. WebUI Test Studio won't care if you do or don't.

If you could be more specific on how/where/why FIPS-2 compliancy is important to you, I can better help answer the question for you.

Greetings,
Cody
the Telerik team

Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items.