Re: [Ntp] NTPv5 draft

Miroslav Lichvar <mlichvar@redhat.com> Wed, 09 December 2020 08:38 UTC

Return-Path: <mlichvar@redhat.com>
X-Original-To: ntp@ietfa.amsl.com
Delivered-To: ntp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAC823A0E07 for <ntp@ietfa.amsl.com>; Wed, 9 Dec 2020 00:38:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.121
X-Spam-Level:
X-Spam-Status: No, score=-2.121 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhat.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id auYagHhoNAbr for <ntp@ietfa.amsl.com>; Wed, 9 Dec 2020 00:38:17 -0800 (PST)
Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [63.128.21.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BD7DD3A0E21 for <ntp@ietf.org>; Wed, 9 Dec 2020 00:38:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1607503096; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=tn/qCg9acKvXiYUNtU7IViEZAuVdnnRI/P1gS1cOFhU=; b=cuxnJ4C8RIld/0VgdqvSIHi0edjF8vPMixs+6PiHVOrzJCbX2hZmzYS3hh9cHq2u2+tu2e bq+QYhVIk8Mn/9pNOhnUuDn8HBGt/HIhAlOoFR/Fp+HdREwZ6GG33RLVPstsOJhCsJ8/vT tMRz8oVeuD6sgeQJ/0j12ZD+ST4jfQg=
Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-248-TAb90qESN3KcgReGT-xX2g-1; Wed, 09 Dec 2020 03:38:12 -0500
X-MC-Unique: TAb90qESN3KcgReGT-xX2g-1
Received: from smtp.corp.redhat.com (int-mx06.intmail.prod.int.phx2.redhat.com [10.5.11.16]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id 3B43C801B20; Wed, 9 Dec 2020 08:38:04 +0000 (UTC)
Received: from localhost (holly.tpb.lab.eng.brq.redhat.com [10.43.134.11]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 46C5F5C232; Wed, 9 Dec 2020 08:38:02 +0000 (UTC)
Date: Wed, 09 Dec 2020 09:38:00 +0100
From: Miroslav Lichvar <mlichvar@redhat.com>
To: James <james.ietf@gmail.com>
Cc: "Salz, Rich" <rsalz=40akamai.com@dmarc.ietf.org>, "ntp@ietf.org" <ntp@ietf.org>, Dieter Sibold <dsibold.ietf@gmail.com>
Message-ID: <20201209083800.GY2352378@localhost>
References: <20201201100305.GK1900232@localhost> <F62C1325-8409-474C-9650-FA96405D0F4B@gmail.com> <20201207104541.GE2352378@localhost> <E0159612-5D83-4A0E-BBD1-1D75C0B49226@akamai.com> <20201207153444.GO2352378@localhost> <1204B871-7728-45DA-B628-8F79BD074A96@akamai.com> <20201208095046.GT2352378@localhost> <D15AF5B4-F976-44D6-B8E7-986E3B8CE23D@akamai.com> <20201208150725.GX2352378@localhost> <6d7daa5e-8537-a3a5-a5c3-2468be4c2918@gmail.com>
MIME-Version: 1.0
In-Reply-To: <6d7daa5e-8537-a3a5-a5c3-2468be4c2918@gmail.com>
X-Scanned-By: MIMEDefang 2.79 on 10.5.11.16
Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=mlichvar@redhat.com
X-Mimecast-Spam-Score: 0
X-Mimecast-Originator: redhat.com
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
Archived-At: <https://mailarchive.ietf.org/arch/msg/ntp/p0zKtCypkLbiK5qPTqTDMzMrso8>
Subject: Re: [Ntp] NTPv5 draft
X-BeenThere: ntp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <ntp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ntp>, <mailto:ntp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ntp/>
List-Post: <mailto:ntp@ietf.org>
List-Help: <mailto:ntp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ntp>, <mailto:ntp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Dec 2020 08:38:21 -0000

On Tue, Dec 08, 2020 at 04:51:21PM +0100, James wrote:
> Given so many existing deployments end up running for many, many years the
> next version of NTP will also be around for a long time. Extensions and
> bolt-ons alone will not suffice in assuring the protocol's longevity, and
> that there is clearly a lot of work that must be done with the core of the
> protocol to address ossification, agility, as well as security. I would
> rather see NTPv5 solve these issues and take longer in its design than just
> deal with the "quick fixes", and I'm prepared to invest a significant
> portion of my own time and energy to support the efforts.

How do you know that extensions will not suffice? Maybe it's clear to
you and others, but not to me. Can you please explain in more detail
why the core protocol needs to be changed?

To me, NTP is a protocol for exchanging timestamps and some related
metadata over network. Compared to most other protocols it's extremely
simple. The data can be authenticated or not. For NTP, it doesn't
matter how it is authenticated. Either the mechanism requires prior
knowledge of time, or it does not. NTP cannot help you to circumvent
that requirement.

What do you want NTP to do?

The issues we have on the wiki are long known, understood and have
proposed fixes. They are causing issues in existing applications. If
there is not much bikeshedding, we can have a complete NTPv5 draft in
couple months. Implementations can follow and people are happy.

Now, suddenly people talk about some non-specific issues that have an
unknown solution. Where were you when NTS was designed? And why does
it need to be solved in NTPv5?

-- 
Miroslav Lichvar