I meant to blog this, but with all the other things that’ve been going on, I forgot. Exchange Server 2003 has passed the evaluation process for receiving the Common Criteria security evaluation at Evaluation Assurance Level (EAL) 4. There’s a good article at the Exchange team blog that covers the certification process and what CC certification means. Interestingly, I haven’t found any evidence that any version of Domino is CC-certified, but I probably just wasn’t using the right search terms (I note that IBM’s talked a lot about the EAL-3 version of SUSE Linux Enterprise Server 9).

I’ll note that ISA 2004 is also EAL 4 certified.