2 ms·
OpenBSD doesn’t send NTP queries to those sources - with the exception of Cloudflare’s NTP pool. It uses TLS timestamps to constrain the possible time values.
by owenmarshall 6y ago
OpenBSD doesn’t send NTP queries to those sources - with the exception of Cloudflare’s NTP pool.
It uses TLS timestamps to constrain the possible time values. This prevents spoofed NTP packets from changing the time.
https://man.openbsd.org/ntpd.conf.5 https://man.openbsd.org/ntpd.conf.5
https://github.com/openbsd/src/blob/master/etc/ntpd.conf https://github.com/openbsd/src/blob/master/etc/ntpd.conf