OpenNTPD inclusion on Fedora Core

Gregory Maxwell gmaxwell at gmail.com
Mon Mar 21 23:30:52 UTC 2005


On Mon, 21 Mar 2005 15:24:59 -0800, Ian Burrell <ianburrell at gmail.com> wrote:

> Also, any one organization would have a hard time sending time to
> change your clock.  ntpd has some sophisticated ways to find bad
> clocks and ignore them.  This is a good reason to stick with ntpd
> instead of OpenNTPD.  NTP isn't authenticated so there are attacks,
> like blocking all other sources and sending bad packets.  But that is
> much likely to come from hackers, not the Naval Observatory.
> 
> If you are concerned about security, buy your own GPS receiver.  If
> you are really paranoid, buy your own atomic clock.

Minor correction:  NTP can be authenticated just fine, but you need to
establish a relationship with the server operator to be set up...
Usually a few emails are all thats required... and there are more than
a few that are willing.




More information about the fedora-devel-list mailing list