Re: Predictable Internet Time

Phillip Hallam-Baker <phill@hallambaker.com> Fri, 21 April 2017 16:32 UTC

Return-Path: <hallam@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97342127342 for <ietf@ietfa.amsl.com>; Fri, 21 Apr 2017 09:32:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.398
X-Spam-Level:
X-Spam-Status: No, score=-2.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0ffT7wGoLdOa for <ietf@ietfa.amsl.com>; Fri, 21 Apr 2017 09:32:13 -0700 (PDT)
Received: from mail-oi0-x235.google.com (mail-oi0-x235.google.com [IPv6:2607:f8b0:4003:c06::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E14371293DF for <ietf@ietf.org>; Fri, 21 Apr 2017 09:32:12 -0700 (PDT)
Received: by mail-oi0-x235.google.com with SMTP id x184so102905468oia.1 for <ietf@ietf.org>; Fri, 21 Apr 2017 09:32:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=kOGTb3un282MrbZ6cnokzjfxkbVXV69OrJF1dM0Bpns=; b=oaB3KJUN3QF9hV7ynxucLEktxQNSBawaORfP6FuVQ4u6vGy7L9qzNgK7zrSP/JqEsm 2tctOYzxCgK25SXURL3LD8PmgXRQGmv18e7IgifurkJepLvLUFDKk33UtXCpuEKqttRd Ohl+18Ybv2/7ZvBAF6Op7Jdwf2A0rC65OakaAJZNQ4SgUFvnOGRXLYHszhOgPp69iUS6 87dKWmeyeNH6KAUFkIOPn5RVGIXaiY46ibj32qLcj2H3YtZH2SPfkwq3SO7/CKMBJtyU PHlz/UiO5u7GnPiPHkRCP5jd6HCQPP/tMnEFlQhXkMbCS2sjC2c58etoXZPdAU+LHgzL gHLQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=kOGTb3un282MrbZ6cnokzjfxkbVXV69OrJF1dM0Bpns=; b=m7m6bW+pal2Nl0TbhOg0mnLJ4tiuZInelgWaogbnCbHYi4cbhYVwGCg55r6AFhiPLf pGD4As4mvgqtDAb9nrNy0lqs7ftqUlYeWFmenlGQVD2yToQV2kuq3OqBQACTOtJQ0MRy WVuGDpaZBZL57B7VqWR+Y0CuOJpvZWJsWHbfcKm2EW9MFP9xxbrRtWcS4iNvmWUNwMO7 n2TjBLCnXVqoSGffCoEtFLhSmW+VdtOAj8hmWpa+xq3hu3f4EWtzucqThS1jDeYMlO2i 8RnO8BVr5XmN5wLMwZrQScecJfTy464um+y2RkUOVTwn/qAabu4oML8+O2bTzXvzlOTC MyMQ==
X-Gm-Message-State: AN3rC/547OmtQr3m8CnDQFQdV82yqojPCnjnHSYnWOkOl37c+/KJ0X4U 3KJZcCZ+R0olDV1skZ/UGwBSWR+JSA==
X-Received: by 10.157.34.21 with SMTP id o21mr8092643ota.201.1492792332274; Fri, 21 Apr 2017 09:32:12 -0700 (PDT)
MIME-Version: 1.0
Sender: hallam@gmail.com
Received: by 10.157.22.175 with HTTP; Fri, 21 Apr 2017 09:32:11 -0700 (PDT)
In-Reply-To: <20170418222004.GB2856@localhost>
References: <CAMm+LwgfQJ8aG5wB=d3fRbbeje3J9o7Z4_DCuP8DL88ouDeKzw@mail.gmail.com> <504e2cea0d1668c31486b05fec0a967a4446aefe@webmail.weijax.net> <CAMm+Lwi_jU6gjdtdM6a2n_9_89tUvWBNXxnMtSjTEA++h1D4Ew@mail.gmail.com> <e0a43370-751f-808c-3719-9716f9cd57d1@isi.edu> <B990A5A4-D62B-4E10-9FF7-7BA4377C0958@frobbit.se> <7bc1a350-549c-c649-81c6-bcd19cff36d7@cisco.com> <B2E6846E-F25B-4792-8E13-B5D898B67223@frobbit.se> <9f719b6a-f3c0-ef98-1636-86e84106e366@cisco.com> <16db07fe-acc5-d178-b56c-755c3cf70680@cs.ucla.edu> <CAMm+LwjQ_kaSBzcJhem5CbPLvMCAJRFnRpqJgu8SFTTQpt4bzQ@mail.gmail.com> <20170418222004.GB2856@localhost>
From: Phillip Hallam-Baker <phill@hallambaker.com>
Date: Fri, 21 Apr 2017 12:32:11 -0400
X-Google-Sender-Auth: 7Qy6_4k-CSybAYc7EjjU72Ib6uo
Message-ID: <CAMm+LwgRegXgM3TqRJW_jfv+S6GrJ5RqJkpfaX0xQ0M7ZO_gPA@mail.gmail.com>
Subject: Re: Predictable Internet Time
To: Nico Williams <nico@cryptonector.com>
Cc: Paul Eggert <eggert@cs.ucla.edu>, IETF Discussion Mailing List <ietf@ietf.org>, Patrik Fältström <paf@frobbit.se>
Content-Type: multipart/alternative; boundary="001a113d6f5cb05341054dafccbe"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/1Bwx84f2CbFUDiM2UvoF8yaaDPw>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 16:32:15 -0000

On Tue, Apr 18, 2017 at 6:20 PM, Nico Williams <nico@cryptonector.com>
wrote:

> On Tue, Jan 03, 2017 at 05:34:11PM -0500, Phillip Hallam-Baker wrote:
> > As I said, I want 30-100 years lead time so I can bake the schedule into
> > devices and remove a trust dependency.
>
> 30 years' lead time for leap seconds?  Can't be done.
>
> Leap seconds depend on events such as earthquakes.
>
> You can estimate their frequency, but you can't estimate when they'll be
> inserted.
>

​Of course it can be done. I can show you one very simple algorithm that
allows every leap second to the end of time to be known right now:

"All leap seconds are abolished. UTC = TAI +37 for all future dates."


We do not need to let the astronomers mess around with time according to
their calendars. What I proposed was to define PIT in such a way that the
difference between PIT and UTC is highly unlikely to be more than 5 seconds
but the table of leap seconds is set 30 years ahead of time.

The basic scheme is to observe the current frequency of leap seconds (8 in
 the past 30 years) and use a simple linear extrapolation to approximate
that for the next 30 years. For dates after 2047, the leap second table and
approximation function will be updated so as to minimize the divergence
between PIT and UTC. If UTC is ahead of PIT in 2018, then an additional
leap second will be scheduled for 30 years in the future, unless a leap
second would have been scheduled for that date anyway in which it will
carry over to the next year.


​The scheme proposed guarantees complete predictability over a 30 year
timespan while ensuring that the deviation between PIT and solar time is
never more than a few seconds. If the frequency of leap seconds becomes too
high, the extrapolation function can be changed. At the end of the day, the
earth is only going to speed up its rotation for very brief intervals, the
long term trend is always downwards.​