[SCITT] Another SCITT Use Case to consider - China Cybersecurity Label
Dick Brooks <dick@businesscyberguardian.com> Mon, 07 September 2026 15:03 UTC
Return-Path: <dick@businesscyberguardian.com>
X-Original-To: scitt@mail2.ietf.org
Delivered-To: scitt@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id BD913136C1498 for <scitt@mail2.ietf.org>; Mon, 7 Sep 2026 08:03:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1788793383; bh=qIbBFnGns78+RyNJ/QAemsVEqEADSVuOrGa0I7HSmhQ=; h=Reply-To:From:To:Subject:Date; b=auD5hk8S+wy3gbEGvxCHpdhEy8wkAXt3HEEqksjliBsnS8C/jv5HjDVzBNXGunWC1 VjnxSBACr4tKiOfg58Ordy7sSR5LMGxmy8PU+N6Y7kYKkbY4B4iwXQly4ZBiNl8X4u JB74P5Kt5t6D3k9pfedHl5M9BsSR7YqUK7RXmnxY=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=businesscyberguardian.com header.b="OyqKQhxv"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="tobYzLDS"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DU5gcYW-EVY6 for <scitt@mail2.ietf.org>; Mon, 7 Sep 2026 08:03:01 -0700 (PDT)
Received: from fout-a2-smtp.messagingengine.com (fout-a2-smtp.messagingengine.com [103.168.172.145]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id CE1DE136C1484 for <scitt@ietf.org>; Mon, 7 Sep 2026 08:03:01 -0700 (PDT)
Received: from phl-compute-08.internal (phl-compute-08.internal [10.202.2.48]) by mailfout.phl.internal (Postfix) with ESMTP id B1740EC0252 for <scitt@ietf.org>; Mon, 7 Sep 2026 11:03:01 -0400 (EDT)
Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-08.internal (MEProxy); Mon, 07 Sep 2026 11:03:01 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= businesscyberguardian.com; h=cc:content-type:content-type:date :date:from:from:in-reply-to:message-id:mime-version:reply-to :reply-to:subject:subject:to:to; s=fm1; t=1788793381; x= 1788879781; bh=+VmYzU0oiAkuehcF0VAclPvoc4t5Q1us2pYMciHHwLs=; b=O yqKQhxvHIk3tY79+3e+vJAj2/XBHWc5RLwbhFiAumszduvGGixFmGwwrjhJ6quGW oOOR3LJIAC68nquMrgTyswqNO1/IY+T2V1HZqPuIfyF1ITyzqJABusyui+XUe/pC qEStt0UhWgqpVY0kIZYqHFtp4JJFu1m/lrsdkIVhyRLx13jpQmPg2EvBDDVUAjw+ 07Kvo57qxpzgDwAiXkbaZO62IvoCsFcEGrHhOnIHyv21m5xKiRj9xfwEvmyFOG9p jUNV0/JN6N5v9oGVTjAao9PUXc63LbRKOc8Mwpyytlfqkb7TEIHlvVMD/FKoJ8T8 Bap4mzr/kDaUENwSiBOfA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:message-id :mime-version:reply-to:reply-to:subject:subject:to:to:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t=1788793381; x= 1788879781; bh=+VmYzU0oiAkuehcF0VAclPvoc4t5Q1us2pYMciHHwLs=; b=t obYzLDSJ70rr21QOGsKsD4GAk+tFsOsbdtyCU89lDQBmn6aOJ90ZeF6Wsb07XCDB B9To4Rz/qKQBm3XfCrMoMmbk6paxz0ts7ajVuiQmAvNIGM3/sR/AYdoxjdCkAu3R iF5k6usEK0CY4QBkPbC6JvPlqsJEfIUmpgdvJx4D8czPvvQ8Tf+pL2QeHwZEX+pN w3RwWtI09JMw3i3BtjZXo3LVUjbPwMNYjfWoOGmEvwI6eBP/LIjdcV6ELiNGzLml m7lfrXPa4o0zvvfoaO24rHEDBs6t6vu42efLOSG0Au3xvWiYNjHaeuMPOmI/rZH1 uH0zLNfcJsTbDJ1GFqyaw==
X-ME-Sender: <xms:JdKeap3xEHc08piwNEPnCfSEnt74_HPVNxqCHFiAZMMG9KJNQHdMdw> <xme:JdKeal9_o0Bkckb1MlE2Mb_KgPoPzi1KSlQEcbnVk6cEtbjaopXa5rYhhSUx1FXvw UNrhhWKbOwkQuUU6VtCvQ9c36EzSahsRd3dwSRmDMi-FMvKNR7CFA>
X-ME-Received: <xmr:JdKeak9iUUARPydloKrDNpqQ888LD1daEp4YsfDAUOmyBXchvcuIfC8>
X-ME-Proxy-Cause: dmFkZTG4BMO+vMMe9j58z9jH9KoJIThbWPKCY6cKveyNXiMV7pkh0w9cdlXjrzf8JBPQmT 8XbjRMpBLcMNCCSRmayZzmqb21imi5XkkwDDexdQTalm23+5S1tZ1PjZbs6U/nwgFS5aNm LUcuLGgLQ1y+FAo5DyFXKk4dUgb7ZhaRo7QGnpFRsvebIfkJ4TQlcJNnxeYGtZ5Zbm+8OQ KcKsKAp2as3NTBrkv3qpu3/4ZzyIWzA8JExvgO0edyF5+2AOMKD9RBBc8B3M3ljQoosRdk 0mUkduD/xUY2ZcTy1ab+JO49zr1up7ZWMOyZ/SsfvSDpBi89SxlpnA5eXtFUA5zyEdztg4 0+7ryebSYFKiKkxTXXhRZGGj2Kj5LNlZXCUpfAr978DObiQDa3CgNtO82wdgBUmjzD/TKV kRISIL9rlgy2uzh0N0AqUcGFqYZt64ckDE2l5htd8GdjtygbMm2i8oCQDpmdOR6GO5yIMm E4mgIa3BiuuOtuJHVx/mYzEqGxvWJGdDHwSuTiVogkO9km+WSGYnVWG7f8y2M4prSrKTNt Xgln2mVBzMkMVsTsshqdGjbWbwPCoBlWIDu50X2ebNwccJH/6DGknH6rYKlG/NDX1vLlIs ZrnqV9rDUYLR6abp60E3F6WZmlDpRPRJlvqSYehX1PlXp2diW2jwS9D7FxwA
X-ME-Proxy: <xmx:JdKeajrqbUqx1nRJnXSf0gearBm9ykA9VtgL9jrG4_RNTOmCH7c3-A> <xmx:JdKeavpB1ybcSoEpEen7tCMJaTF9xM2si9oZKB5ZpCLz3i1JvV7P9A> <xmx:JdKeapk02_U-mqB2Rc9QBIMvoGRkqyBRjAsRTQyGeKY35JR5qKT0EA> <xmx:JdKeapHQx2uKT5msFgvOtrnXqgZJ3sa--Q0Hs3dNdYAuuUJQecx-5Q> <xmx:JdKean0VOq4dFlnuEXsYOjxLiT56DlTR2Y-TZ6QOwjpWvfv-HwUjYbZj>
Feedback-ID: i99214975:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA for <scitt@ietf.org>; Mon, 7 Sep 2026 11:03:01 -0400 (EDT)
From: Dick Brooks <dick@businesscyberguardian.com>
To: 'scitt' <scitt@ietf.org>
Date: Mon, 07 Sep 2026 11:02:59 -0400
Organization: Business Cyber Guardian
Message-ID: <1b5d01dd3ed9$f9a776f0$ecf664d0$@businesscyberguardian.com>
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_000_1B5E_01DD3EB8.7295D6F0"
X-Mailer: Microsoft Outlook 16.0
Thread-Index: Ad0+2WiQ67rGf8WbRRKCH94gd+jjAg==
Content-Language: en-us
Message-ID-Hash: OZBZXRR743VBZJ45GYFAVYGIRUJJ3AGD
X-Message-ID-Hash: OZBZXRR743VBZJ45GYFAVYGIRUJJ3AGD
X-MailFrom: dick@businesscyberguardian.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-scitt.ietf.org-0; header-match-scitt.ietf.org-1; header-match-scitt.ietf.org-2; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Reply-To: dick@businesscyberguardian.com
Subject: [SCITT] Another SCITT Use Case to consider - China Cybersecurity Label
List-Id: "Supply Chain Integrity, Transparency, and Trust" <scitt.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/scitt/AqZyDPofCkmGvEeHo3DnuhZw6gA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scitt>
List-Help: <mailto:scitt-request@ietf.org?subject=help>
List-Owner: <mailto:scitt-owner@ietf.org>
List-Post: <mailto:scitt@ietf.org>
List-Subscribe: <mailto:scitt-join@ietf.org>
List-Unsubscribe: <mailto:scitt-leave@ietf.org>
This is another good use case for SCITT; the registration of Product Cybersecurity Labels indicating a "trust score" using a 3 star method. The SAG-CTR Trust Registry already supports the China Cybersecurity Label and could be shown in a SCITT hackathon using the Microsoft backend Transparency Service to host the VDS. https://cybernews.com/security/china-cybersecurity-proof-foreign-device-make rs-label/ Thanks, Dick Brooks Active Member of the CISA Critical Manufacturing Sector, Sector Coordinating Council - A Public-Private Partnership Lifetime IEEE Member, #SBOM SIG member <https://businesscyberguardian.com/> https://businesscyberguardian.com/