On 1/25/22 17:08, Christoph Anton Mitterer wrote:
On Tue, 2022-01-25 at 16:34 -0600, Richard Laager wrote: Consider a powerful attacker who a) runs a clocksource one trusts and b) can block traffic to any other sources in the pool one uses?Does NTP(sec) complain eventually (like too many sources not answering, something is fishy)... or would it just happily continue with the one (then evil) source?
With the Debian-default of "tos minsane 3", it's not going to follow a single source, period.
-- Richard
OpenPGP_signature
Description: OpenPGP digital signature
