IETF Logo Mail Archive

Re: [dhcwg] [ntpwg] Fwd: New Version Notification for draft-ogud-dhc-udp-time-option-01.txt

Michael Richardson <mcr+ietf@sandelman.ca> Tue, 03 December 2013 14:15 UTC

Return-Path: <mcr@sandelman.ca>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 015D61ACB4E for <dhcwg@ietfa.amsl.com>; Tue, 3 Dec 2013 06:15:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ntNuZRGDi42J for <dhcwg@ietfa.amsl.com>; Tue, 3 Dec 2013 06:15:01 -0800 (PST)
Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3::184]) by ietfa.amsl.com (Postfix) with ESMTP id 73E931AD694 for <dhcwg@ietf.org>; Tue, 3 Dec 2013 06:15:01 -0800 (PST)
Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 4A9D82002F; Tue, 3 Dec 2013 10:28:13 -0500 (EST)
Received: by sandelman.ca (Postfix, from userid 179) id E2C9063B87; Tue, 3 Dec 2013 09:14:54 -0500 (EST)
Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id D49C263AEF; Tue, 3 Dec 2013 09:14:54 -0500 (EST)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: Olafur Gudmundsson <ogud@ogud.com>
In-Reply-To: <D82E52A5-F0CF-4A0A-AE1B-0440CAAC8CE7@ogud.com>
References: <20131202044734.B78E0406060@ip-64-139-1-69.sjc.megapath.net> <529C1A31.2080900@ntp.org> <258D838F-F4BA-45D2-AA41-BB05E3AB147C@ogud.com> <529CA616.3010402@ntp.org> <D82E52A5-F0CF-4A0A-AE1B-0440CAAC8CE7@ogud.com>
X-Mailer: MH-E 8.2; nmh 1.3-dev; GNU Emacs 23.4.1
X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m<nPbLgmtKK-5dC@#:k
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha1"; protocol="application/pgp-signature"
Date: Tue, 03 Dec 2013 09:14:54 -0500
Message-ID: <25458.1386080094@sandelman.ca>
Sender: mcr@sandelman.ca
Cc: Hal Murray <hmurray@megapathdsl.net>, Bernie Volz <volz@cisco.com>, NTP Working Group <ntpwg@lists.ntp.org>, Ted Lemon <ted.lemon@nominum.com>, "dhcwg@ietf.org WG" <dhcwg@ietf.org>
Subject: Re: [dhcwg] [ntpwg] Fwd: New Version Notification for draft-ogud-dhc-udp-time-option-01.txt
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Dec 2013 14:15:10 -0000

Olafur Gudmundsson <ogud@ogud.com> wrote:
    >> I doubt that the number of "local resolvers" used by the general
    >> populace that can support DNSSEC reach even .1% today, never mind
    >> whether the server has it enabled.
    >> 

    Olafur> Chrome and Firefox have DNSSEC validation libraries in testing. 
    Olafur> Once they turn that on the numbers will jump. 
    Olafur> X.509 cert checks happen on edge devices today in large numbers. 
    Olafur> This is not just for DNSSEC this is for any device that wants to
    Olafur> do time check before NTP can finish.  

X.509 checks happen "above" IP, closest to the application where one can ask
the user if they are sure.
DNSSEC checks happen "within" IP --- often on devices without users or
interfaces.

Home/CPE gateways will need to have a process to bootstrap to secure time,
and we will need to write this up in homenet, and if a DHCP option to provide
time to within an hour helps, GOOD.

-- 
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works

v2.23.0 | Report a Bug | By Email