22 Aug
2013
22 Aug
'13
7:14 p.m.
On Thu, Aug 22, 2013 at 6:46 PM, Nick Mathewson nickm@torproject.org wrote:
Despite this late date, many hosts aren't running NTP and don't have very well synchronized clocks. Even more hosts aren't running a secure NTP; it's probably easy to desynchronize target hosts.
Not strongly related to the proposal, but authenticated (autokey) NTP is not really secure. http://tools.ietf.org/html/draft-ietf-ntp-network-time-security http://www.innovationslab.net/~brian/NTP/autokey-analysis.pdf
--
Maxim Kammerer
Liberté Linux: http://dee.su/liberte