IETF Logo Mail Archive

Re: [Ntp] NTPv5 draft

Doug Arnold <doug.arnold@meinberg-usa.com> Mon, 07 December 2020 22:10 UTC

Return-Path: <doug.arnold@meinberg-usa.com>
X-Original-To: ntp@ietfa.amsl.com
Delivered-To: ntp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F05173A0C03 for <ntp@ietfa.amsl.com>; Mon, 7 Dec 2020 14:10:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=meinbergfunkuhren.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wQKBvKTcopeG for <ntp@ietfa.amsl.com>; Mon, 7 Dec 2020 14:10:10 -0800 (PST)
Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60048.outbound.protection.outlook.com [40.107.6.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B89A3A0C28 for <ntp@ietf.org>; Mon, 7 Dec 2020 14:10:08 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=UDwn9F8KmjzSymWIKueAGqNPMYZvJg8iqtvonYMYqTB0Z9xTNpe5BAZRobz4/dOWSxn3X71fg4Y3vBONXWwKo8pBF5wMTW1fcX/1B1qlT75Cp5LizxuOhT4FN91WILBGcsXLl5t+QI2yl0N9vLV70WxQVChpEsvlLOqgvKU2H1jxA2pHhRXobePpuw1yej6tHtqWBX5F/bW9UAkZjiD0fqEHdMHoyXESmAE7Zwy1dp/syFhRlpqEMGYoh4rwgHGe3mnZoox2IIOjS85sGpPb2SKh0u/LWO8NUwtLG0cpEiklMLFDXzSbPXCOfINYKyha+2IHmQO3ElnK1jLiFp/Ckg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=7hVcXqX0MaIr/pde0V6oJMTF/pGCNG77BVQJTcvoWgo=; b=Q2/rVBACh6lu+5FpmqHtv7DGZqc8Rnb2FGZIb+iDmZ8zkJUj2VcP6xaCaIxsHrqNYbGKxKAfM+iUQvNRT/PnYCymv0KKKSt55htkQ3axVWYHt96nsnT6f7JKgZBMJHi1oVa/xjT5UoPmflD/TXNAg3uIzUzgHV63WbRYMNPVBKASbPGOcAa/JPN1JYs4vMLaQzMrm6QNJa4Dc4wUEl+XaLvJUYXCMFJO4aAOTMQepRIctBxkyJZiX8vY3vsVInzjGdVl21XO9bZEdOQcS9Z4Mv65IS2Bh1iQJJ+NPlZUODY9X84IAkhOTuTpQlaL3mDMk+aGPOvyq9HIaNTL0YjqSw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=meinberg-usa.com; dmarc=pass action=none header.from=meinberg-usa.com; dkim=pass header.d=meinberg-usa.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=meinbergfunkuhren.onmicrosoft.com; s=selector1-meinbergfunkuhren-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=7hVcXqX0MaIr/pde0V6oJMTF/pGCNG77BVQJTcvoWgo=; b=Ms6Tcmf6vmW1NkZ4O6N2JMzWAMwtt6NEYLPO6FlQqflsJ5Q4E59Vyuc1EomPphyfp89u6xZwua//7DiZKFWSNM+CnA/7lXtnm6HGe+ov8ZmMaUiUuUc1EgkYzkPEnKHCGITREPqm8l8V9YZ6T2s3sHssugqA4/st+Ar/pkfQUhc=
Received: from AM7PR02MB5765.eurprd02.prod.outlook.com (2603:10a6:20b:102::15) by AS8PR02MB6517.eurprd02.prod.outlook.com (2603:10a6:20b:23b::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3632.22; Mon, 7 Dec 2020 22:10:05 +0000
Received: from AM7PR02MB5765.eurprd02.prod.outlook.com ([fe80::d022:fca0:630d:905f]) by AM7PR02MB5765.eurprd02.prod.outlook.com ([fe80::d022:fca0:630d:905f%6]) with mapi id 15.20.3632.018; Mon, 7 Dec 2020 22:10:05 +0000
From: Doug Arnold <doug.arnold@meinberg-usa.com>
To: "Salz, Rich" <rsalz=40akamai.com@dmarc.ietf.org>, Miroslav Lichvar <mlichvar@redhat.com>
CC: "ntp@ietf.org" <ntp@ietf.org>, Dieter Sibold <dsibold.ietf@gmail.com>
Thread-Topic: [Ntp] NTPv5 draft
Thread-Index: AQHWuEaDlKEJhbHR1E2C9HXHW1gbZ6nhKNUAgADZ6oCAABvAAIAAA0aAgAUq/wCABE7lgIAASaSAgAAHHwCAABHggIAACMSA
Date: Mon, 07 Dec 2020 22:10:05 +0000
Message-ID: <4719090B-86D5-4BB5-BCBE-E0DF739D6816@meinberg-usa.com>
References: <20201111161947.GG1559650@localhost> <AA848C67-CFB7-43FC-B190-FD3911360373@gmail.com> <20201201081203.GB1900232@localhost> <2B8C7410-DFA7-4A87-A33E-F50FFA96D0F9@gmail.com> <20201201100305.GK1900232@localhost> <F62C1325-8409-474C-9650-FA96405D0F4B@gmail.com> <20201207104541.GE2352378@localhost> <E0159612-5D83-4A0E-BBD1-1D75C0B49226@akamai.com> <20201207153444.GO2352378@localhost> <1204B871-7728-45DA-B628-8F79BD074A96@akamai.com>
In-Reply-To: <1204B871-7728-45DA-B628-8F79BD074A96@akamai.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.43.20110804
authentication-results: dmarc.ietf.org; dkim=none (message not signed) header.d=none;dmarc.ietf.org; dmarc=none action=none header.from=meinberg-usa.com;
x-originating-ip: [64.30.82.72]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 65188761-e04c-4a0d-e4fb-08d89afcda53
x-ms-traffictypediagnostic: AS8PR02MB6517:
x-microsoft-antispam-prvs: <AS8PR02MB65175A1EA275188DB8487EB9CFCE0@AS8PR02MB6517.eurprd02.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:7691;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR02MB5765.eurprd02.prod.outlook.com; PTR:; CAT:NONE; SFS:(346002)(366004)(136003)(396003)(376002)(39830400003)(66556008)(4326008)(6506007)(44832011)(66476007)(66946007)(4744005)(8676002)(83380400001)(64756008)(86362001)(71200400001)(91956017)(33656002)(36756003)(2906002)(316002)(478600001)(186003)(110136005)(8936002)(2616005)(6486002)(66446008)(6512007)(5660300002)(54906003)(966005)(76116006)(26005)(66574015)(61000200002)(45980500001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: 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
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-ID: <E32603FE1002A345B30D0690711A1F47@eurprd02.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: meinberg-usa.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM7PR02MB5765.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 65188761-e04c-4a0d-e4fb-08d89afcda53
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Dec 2020 22:10:05.7724 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d59904cd-769f-4368-8bd0-f5f435893a38
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: sNZTTweffE3SQ2fiYv12DgaaCaOBwO+PKa1LtCoKmnf27C/ljaFciSln7/tu7FM1XpE2cRU++ko6WGJXKC9OAw4nc1iDXDrEaJKcog8Fp/I=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR02MB6517
Archived-At: <https://mailarchive.ietf.org/arch/msg/ntp/pRkWqFxHAxbiyDpvu49woIG8Tv0>
Subject: Re: [Ntp] NTPv5 draft
X-BeenThere: ntp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <ntp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ntp>, <mailto:ntp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ntp/>
List-Post: <mailto:ntp@ietf.org>
List-Help: <mailto:ntp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ntp>, <mailto:ntp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Dec 2020 22:10:20 -0000

I think that we all agree that ntpv5 has to have a security mechanism,  but it could be optional and/or described in a separate document.  Time over the open internet is a popular use case, and it must be covered.  But there is a lot of ntp in private networks.  Many network operators in these networks will want to turn on security, but probably not all.

Doug

On 12/7/20, 11:38 AM, "ntp on behalf of Salz, Rich" <ntp-bounces@ietf.org on behalf of rsalz=40akamai.com@dmarc.ietf.org> wrote:

    My view is that it is no longer acceptable to design a protocol for deployment on the open Internet that has no authentication or message integrity and that people who disagree are out of consensus.

    Does someone want to ask the current IESG for their view?


    _______________________________________________
    ntp mailing list
    ntp@ietf.org
    https://www.ietf.org/mailman/listinfo/ntp

v2.23.0 | Report a Bug | By Email