CVSROOT: /cvs
Module name: src
Changes by: dera...@cvs.openbsd.org 2019/11/10 18:04:55
Modified files:
usr.sbin/ntpd : ntpd.c
Log message:
Disable -s and -S functionality. -s would force time using NTP packets without
any MITM protection checks. We've had constraint checks for MITM protection
for some time. Recent work changed the default mode to rapidly check NTP
packets against constraint validation, as the default mode.
In environments where https traffic doesn't work, ethernet-near servers can
be labelled as "trusted". trusted sensor support is also coming.
We have reasons to immediately move people away from the -s mode.
ok otto
