[ntp:questions] Authenticated TLS "constraints" in ntpd

2015-02-11 Thread Jan Ceuleers
I'd like to draw this list's attention to an idea that Reyk Floeter floated, namely to use TLS to help sanity-check NTP timestamps: http://marc.info/?l=openbsd-tech&m=142356166731390&w=2 ___ questions mailing list questions@lists.ntp.org http://lists.ntp

Re: [ntp:questions] Authenticated TLS "constraints" in ntpd

2015-02-11 Thread Terje Mathisen
Jan Ceuleers wrote: I'd like to draw this list's attention to an idea that Reyk Floeter floated, namely to use TLS to help sanity-check NTP timestamps: http://marc.info/?l=openbsd-tech&m=142356166731390&w=2 Isn't public/private signed timestamps far better? If you can't get that, and are too

Re: [ntp:questions] Authenticated TLS "constraints" in ntpd

2015-02-12 Thread Miroslav Lichvar
On Wed, Feb 11, 2015 at 02:29:54PM +0100, Terje Mathisen wrote: > Jan Ceuleers wrote: > >I'd like to draw this list's attention to an idea that Reyk Floeter > >floated, namely to use TLS to help sanity-check NTP timestamps: > > > >http://marc.info/?l=openbsd-tech&m=142356166731390&w=2 > > > Isn't p

Re: [ntp:questions] Authenticated TLS "constraints" in ntpd

2015-02-12 Thread Harlan Stenn
Miroslav Lichvar writes: > On Wed, Feb 11, 2015 at 02:29:54PM +0100, Terje Mathisen wrote: > > Jan Ceuleers wrote: > > >I'd like to draw this list's attention to an idea that Reyk Floeter > > >floated, namely to use TLS to help sanity-check NTP timestamps: > > > > > >http://marc.info/?l=openbsd-tec