Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-06 Thread Brian Utterback
On 01/04/11 13:44, Miroslav Lichvar wrote: Hi, I'm wondering about the section 5.3.3 on the ntp support web http://support.ntp.org/bin/view/Support/SelectingOffsiteNTPServers#Section_5.3.3. It says and explains that minimum number of servers to detect one falseticker is four, is that

Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-06 Thread Brian Utterback
On 01/04/11 17:07, Miroslav Lichvar wrote: On Tue, Jan 04, 2011 at 04:12:06PM -0500, Brian Utterback wrote: On 01/04/11 13:44, Miroslav Lichvar wrote: It says and explains that minimum number of servers to detect one falseticker is four, is that really correct? I understand that four is

Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-05 Thread Terje Mathisen
David L. Mills wrote: Miroslav, Nowhere in the documentation produced by me is the statement that the minimum number of servers to reliably find the truechimers is four. There might have been some confusion in the past, in particular with reference to Lamport's paper, which describes an

Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-05 Thread Miroslav Lichvar
On Wed, Jan 05, 2011 at 09:23:59AM +0100, Terje Mathisen wrote: Two servers which don't overlap, and a third which overlaps (partly) both of them: server A and B --- server C In this particular situation C must be a survivor, but since it overlaps both A and B

Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-05 Thread David L. Mills
Terje, That's why Autokey uses digital signatures and zero-knowledge identity proofs. Dave Terje Mathisen wrote: David L. Mills wrote: Miroslav, Nowhere in the documentation produced by me is the statement that the minimum number of servers to reliably find the truechimers is four.

Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-05 Thread David L. Mills
MIroslav, The select algorithm was changed in a very minor way to conform precisely to the formal assassin quoted in my previous message. It probably has very little practical significance. After all, the old algorithm has been going strong for nineteen years. Dave Miroslav Lichvar wrote:

Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-05 Thread Miroslav Lichvar
On Wed, Jan 05, 2011 at 10:31:15AM -0500, Brian Utterback wrote: Let's equalize a bit to make it a bit more fair: c b- a-- So, now, if you were NTP, which would you choose? You are correct in your assessment that NTP would accept them all as

Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-05 Thread David L. Mills
Terfe, Read the formal assertion carefully and examine the algorithm on the Select Algorithm page. The algorithm would return interval C as the smallest intersection with the largess number of contributors. Dave Terje Mathisen wrote: David L. Mills wrote: Miroslav, Nowhere in the

Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-05 Thread David L. Mills
Miroslav, According to your diagram, the algorithm would determine the intersection interval as interval a. The midpoints of all three intervals would be considered truechimers, since each of the intervals a, b and c, contain points in the intersection interval. Dave Miroslav Lichvar

[ntp:questions] Number of servers needed to detect one falseticker?

2011-01-04 Thread Miroslav Lichvar
Hi, I'm wondering about the section 5.3.3 on the ntp support web http://support.ntp.org/bin/view/Support/SelectingOffsiteNTPServers#Section_5.3.3. It says and explains that minimum number of servers to detect one falseticker is four, is that really correct? I understand that four is better for

Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-04 Thread Richard B. Gilbert
On 1/4/2011 1:44 PM, Miroslav Lichvar wrote: Hi, I'm wondering about the section 5.3.3 on the ntp support web http://support.ntp.org/bin/view/Support/SelectingOffsiteNTPServers#Section_5.3.3. It says and explains that minimum number of servers to detect one falseticker is four, is that really

Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-04 Thread Miroslav Lichvar
On Tue, Jan 04, 2011 at 02:35:13PM -0500, Richard B. Gilbert wrote: The problem with using only two servers is that NTPD has no means of determining which is more nearly correct when the two differ, as they inevitably will! ntpd will pick the one with smaller distance if their intervals

Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-04 Thread David Woolley
Miroslav Lichvar wrote: On Tue, Jan 04, 2011 at 02:35:13PM -0500, Richard B. Gilbert wrote: The problem with using only two servers is that NTPD has no means of determining which is more nearly correct when the two differ, as they inevitably will! ntpd will pick the one with smaller distance

Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-04 Thread David L. Mills
Miroslav, Nowhere in the documentation produced by me is the statement that the minimum number of servers to reliably find the truechimers is four. There might have been some confusion in the past, in particular with reference to Lamport's paper, which describes an algorithm much more

Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-04 Thread David L. Mills
David, As you might see from the online documentation, much of the tutorial material has been largely rewritten. Awhile back, some kind soul pointed out a logical discrepancy in the select algorithm. That was repaired, the code updated and the documentation refreshed. The pages linked from

Re: [ntp:questions] Number of servers needed to detect one falseticker?

2011-01-04 Thread David Woolley
The average user doesn't read such documentation. The average user, if they believe anything at all, seems to believe that there is no combining algorithm and the server with the * on the ntpq peers display is the only one used to discipline the clock. This is why they get so concerned about