The NIT has issued a technical decision for FTP_ITC.1 with signed downloads

NDcPP requires exact conformance and HTTP is not among the options provided in the selection for FTP_ITC.1. An HTTP connection is therefore not conformant with the FTP_ITC.1 requirements. For the use case of downloading signed firmware updates, NDcPP doesn't mandate the use of a trusted channel according to FTP_ITC.1. For details please see the resolution for RfI#(2016)57rev2.

For further information, please see the NIT interpretation at:

https://www.niap-ccevs.org/Documents_and_Guidance/ccevs/NITDecisionRfi201926.pdf

See issue descripton