Harlan Stenn wrote:
> Danny,
> 
> I was not talking about autokey.  Autokey requires a dance.
> 
> Private key does not, as I recall.
> 
> H
> 

Okay, but I was reacting to this statement:

> I belive the 'auth' for broadcast is private key auth;

which is not correct. auth for broadcast and any other type of packet
can be either the private key that you are talking about or autokey.

You are correct that private key would not do the autokey dance though
if you did want to authenticate there's nothing wrong with that. The
concern here is with the asymmetry. To give at least some measure of
protection private key may be the best option.

Danny
_______________________________________________
questions mailing list
[email protected]
https://lists.ntp.isc.org/mailman/listinfo/questions

Reply via email to