3 ms·
One thing that I find a bit worrying is that there are now two projects that try to create better implementations of the existing ntp protocol, but the protocol
by hannob 11y ago
One thing that I find a bit worrying is that there are now two projects that try to create better implementations of the existing ntp protocol, but the protocol itself is inherently insecure.
ntp right now is a clear-text protocol with no authentication and no protection at all against man-in-the-middle-attacks. There are two authentication modes from which one is insecure and the other relies on symmetric keys, which is impractical.
There's some work done on ntp security [1], I hope we'll see this implemented soon.
[1] https://tools.ietf.org/html/draft-ietf-ntp-using-nts-for-ntp https://tools.ietf.org/html/draft-ietf-ntp-using-nts-for-ntp
- dfc 11y agoI am assuming that when you refer to "the other project trying to create a better implementation" you are referring to ntimed? It seems that you are forgetting about Chrony and OpenNTPd.