[Ntp] NTP Security (was NTPv5: big picture)

[Hal Murray <[e-mail]>]

> I would like to see security on that list.

What do you want that isn't already covered by NTS and/or shared keys?

(I think we need to move the MAC for shared keys into an extension.  That's 
not a "big picture" item.)

-------

As far as I can tell, the problem with NTP security is deployment of NTS.  The 
pool has captured a large portion of the market and it is fundamentally 
insecure.

HTTPs works because lots of sites want your money.  Nobody is paying for NTP.

I see two ways to get a wide deployment.  One is to get ISPs to run secure NTP servers for their clients.  The other is to deploy something similar to the DNS root and top level servers.  I don't know how that works, in particular, who pays for it.


-- 
These are my opinions.  I hate spam.