3 ms·
I don’t think NTP uses TLS by default. The closest equivalent I can find online is NTS, which was only standardized in 2020 (and for which I can’t find clear ad
by woodruffw 2y ago
I don’t think NTP uses TLS by default. The closest equivalent I can find online is NTS, which was only standardized in 2020 (and for which I can’t find clear adoption numbers).
(But regardless: “the transport layer is secure” is not a good reason to leave memory unsafe code on the network boundary. Conventional wisdom in these settings is to do the “defense in depth” thing and assume that transport security can be circumvented.)
- mcpherrinm 2y agontpd-rs supports NTS and we (Let’s Encrypt) are using it a little bit. But it is far from having any wide adoption yet. There aren’t many public NTS servers: https://netfuture.ch/public-nts-server-list/ https://netfuture.ch/public-nts-server-list/ and https://github.com/jauderho/nts-servers https://github.com/jauderho/nts-servers have some listed.