The NIT has issued a technical decision for RFC Reference incorrect in TLSS Test

The NIT acknowledges the issues presented in rfi #202022.

The first issue refers to a possibly incorrect reference to Figure 3 with regards to FCS_TLSS_EXT.1.4 Test 3(b). The NIT disagrees with the issue as raised because figures 3 and 4 define scenarios when a SessionTicket may be rejected by the TOE’s server while permitting flexibility in how the TOE Server may re-issue (or not) a NewSessionTicket. 

The second issue above implicitly identifies a limitation in the message sequence for FCS_TLSS_EXT.1.4 test 3(a). The NIT acknowledges the issue and refers the reader to the resolution and rationale presented in NIT RFI 202024.

For further information, please see the NIT interpretation at:  https://www.niap-ccevs.org/Documents_and_Guidance/ccevs/NITDecisionRfI202022.pdf

See issue description.