Re: [Ntp] What is SNTP?

[Danny Mayer <[e-mail]>]

On 9/6/22 8:45 PM, Hal Murray wrote:
> I said:
>>> The S is for Simple.  I hope SNTP will work without extension fields.
> Kristof Teichel said:
>> Wouldn't that preclude use of NTS?
> Good point.
>
> There are 2 possible meanings for "simple" in SNTP.  One is that you don't have to implement most of what is described in RFC 5905.  The other is that the code really is simple when you look at it.  Does anybody have suggested terms?  Basic?  Minimal?
There is only one meaning for SNTP and that is what is described in 
RFC5905. No more and no less. If the section is not clear then it's time 
to write a clarification for it.
>
> My "without extension field" comment was for basic/minimal SNTP.  You should be able to get the time without using any extensions.
>
> An SNTP client without NTS is only a few hundred lines of code.  NTS will multiply that by (guess) a factor of 4.  It's no longer simple.  You have to get a TLS library and root certificates and keep them up to date.  You need to store cookies.  ...
>
> Yes, we should provide sample code for SNTP+NTS.   Feel free to remind me in a couple of months if I don't announce something.  (That will remove the "guess" above.)
I very much doubt that today you can get the IETF to accept a draft 
unless there is some sort authentication mechanism.
>
> What I really want to do is avoid crap like this story:
>    https://kb.meinbergglobal.com/kb/time_sync/timekeeping_on_windows/configuring_w32time_as_ntp_client
> Thanks Martin, for writing that up.
>
>
> The current status is that code gets shipped and we are expected to support it forever.  We don't even have specs.
>
> I think we need to do better than "go read RFC 5905".
>
> I think we need:
>    A list of the version 1 formats that are in use.
What do you mean by version 1 formats? NTPv4 would be a minimum format.
>       We can get requests at pool servers.
>       We also need to know what responses need to look like.
>    Good documentation for client side SNTP.
>       Maybe something like a BCP.
>       Maybe just a web page.
>    Sample code for SNTP and SNTP+NTS.
>    Setup servers that don't support v1 for testing.
>
V1 of what?

Danny