You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We developed WinUI3 application based on Edge WebView2. We are required that the application should be FIPS compliance. So could anyone confirm:
Does Microsoft Edge use FIPS 140-2 validated cryptography? Is it still using non FIPS validated Chromium built-in cryptographic modules (BoringSSL) or are the latest versions using FIPS validated cryptography?
If not FIPS validated cryptography used, have we way to replace the library by other FIPS validated library to inject to Edge or Edge WebView2? or any other methods we can ensure Edge WebView2 FIPS compliance, then our application can be FIPS compliance?
This discussion was converted from issue #3684 on October 10, 2023 18:15.
Heading
Bold
Italic
Quote
Code
Link
Numbered list
Unordered list
Task list
Attach files
Mention
Reference
Menu
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
-
We developed WinUI3 application based on Edge WebView2. We are required that the application should be FIPS compliance. So could anyone confirm:
Does Microsoft Edge use FIPS 140-2 validated cryptography? Is it still using non FIPS validated Chromium built-in cryptographic modules (BoringSSL) or are the latest versions using FIPS validated cryptography?
If not FIPS validated cryptography used, have we way to replace the library by other FIPS validated library to inject to Edge or Edge WebView2? or any other methods we can ensure Edge WebView2 FIPS compliance, then our application can be FIPS compliance?
Beta Was this translation helpful? Give feedback.
All reactions