Re: [Ntp] The trick to timestamp with authentication

[Hal Murray <[e-mail]>]

[e-mail] said:
> This could be handled using a symmetric group key that authorized nodes get
> periodically from a key exchange server.  See, for example GDOI.  I believe
> that NTS could be adapted to group key operation as well. 

The whole idea of patching an authenticated packet seems wrong.

How much effort has gone into investigating alternatives?


> I see you were paying attention. Accuracy and security are a trade-off.  If
> you want on path timing support and security, then you either have to have a
> lot of secrets or a secret that a lot of nodes are in on.  Either way it is
> less secure than just NTS between a client and a server.  However, in a
> private network where someone wants microsecond level time transfer accuracy
> that might be a sensible trade-off. 

That seems like a narrow market.  It's a private network.  They want 
authentication so they don't trust their network yet they do trust it enough 
to patch their authenticated packets.


-- 
These are my opinions.  I hate spam.