--------
In message <20151025162731.7a4a7...@aluminium.mobile.teply.info>, Florian Teply
 writes:

>Of course proper authentication would make this kind of attack more
>difficult, but as far as I can see, I'd estimate the amount of
>authenticated NTP traffic on the internet to be negligible.

That's because the standardized way of doing it doesn't really work.

>> The only real cure is to have your own NTP servers.
>> 
>Which then of course must not rely on external sources for their time,

Obviously.  There is no free lunch.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
p...@freebsd.org         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.
_______________________________________________
time-nuts mailing list -- time-nuts@febo.com
To unsubscribe, go to https://www.febo.com/cgi-bin/mailman/listinfo/time-nuts
and follow the instructions there.

Reply via email to