Re: [ntpwg] [dhcwg] Re: Network Time Protocol (NTP) OptionsforDHCPv6

[Danny Mayer <[e-mail]>]

David W. Hankins wrote:
> I do not believe there is any reasonable way we can provide this
> with complete assuredness.
> 
> It may appear that if you gave the DNS name via DHCP that the clock's
> administrator can now do clever things with DNS replies to ease the
> pain on the individual clocks.  So mitigation tools may exist.
> 
> However it also opens the doorway for a clock manufacturer to set
> the static value to a domain name they control - and deliver A records
> for other folks' clocks.
> 

With the pool config option you can now point to the pool (pool.ntp.org)
and each time you make a query you will get a different list of
addresses to use. The pool also is grouped into areas and countries and
provides a much better loading on the NTP servers in the list. ntpd will
configure up to 10 of these addresses to use.

> You're screwed either way...in this case, you have some control over
> firmware that has not been upgraded.
> 

We prefer the pool.

Danny

_______________________________________________
dhcwg mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/dhcwg