|
|
Description:
|
Low assurance
|
|
Information:
|
This level is intended for applications handling information that requires privacy protection. A Low assurance FDIC CA will only issue Low assurance certificates that will not be used for digital signatures. Access to FDIC information resources shall never be allowed exclusively on the basis of low assurance certificates. Low assurance certificates, (or non-FDIC equivalent certificates) may be accepted by FDIC Relying Parties for the purpose of authenticating or encrypting communication that does not access or process FDIC information requiring a digital signature. These certificates shall be issued to employees, select contractor, and end entities that require the ability to securely exchange encryption key. These certificates may, for example, be issued by non-FDIC commercial entities, and be used to authenticate communications with external vendors.
More information can be found in the Certificate Policy for the Federal Deposit Insurance Corporation (22 Oct 2001) from NIST.
|
|
joint-iso-itu-t(2)
