Re: [Ntp] Antw: [EXT] Re: Quick review of WGLC for status change for draft‑ietf‑ntp‑update‑registries

James Browning <jamesb.fe80@gmail.com> Thu, 11 August 2022 15:00 UTC

Return-Path: <jamesb.fe80@gmail.com>
X-Original-To: ntp@ietfa.amsl.com
Delivered-To: ntp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 53E8CC15DD69 for <ntp@ietfa.amsl.com>; Thu, 11 Aug 2022 08:00:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.857
X-Spam-Level:
X-Spam-Status: No, score=-6.857 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y4PkaNZpwNQ1 for <ntp@ietfa.amsl.com>; Thu, 11 Aug 2022 08:00:07 -0700 (PDT)
Received: from mail-vk1-xa36.google.com (mail-vk1-xa36.google.com [IPv6:2607:f8b0:4864:20::a36]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A94A3C19E104 for <ntp@ietf.org>; Thu, 11 Aug 2022 08:00:06 -0700 (PDT)
Received: by mail-vk1-xa36.google.com with SMTP id t64so3068590vkb.12 for <ntp@ietf.org>; Thu, 11 Aug 2022 08:00:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc; bh=+6/XVdkTyn7yYhPyq07Le6MDAGV7rZszylU9dFgBOd4=; b=UPW9/4+zCx/KzCHCO/ueOv25ORisbR4uN4MiXUhYScOOwQKuEekTPwNipPh/uWqSVu W1oxTpxtZAYvMN/IepjC33mB6kTdTlyOk0CVZYT6UW9fRsP8a1X8BpwsuGYybHpBkyl+ hjFz3yi5XdtA2XjgbvxC1+txtyhAs0ybqj10XXvseICV4HByWBbv++Cqu/M5f0mjvHFo Cj/ydTV5bmYaTtWht7bM3abIHNOYs6d4SCs1lWjxVtXRy1Rt7k6QiMghN8nk+RObQ8YL Nzkk7iDv7m1xa++md/3KBI4Ob1B8rHwMP+RJxlbb8rvM9rKKbXAlUyLMOpIFWIL7ovS5 mFcw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-message-state:from:to:cc; bh=+6/XVdkTyn7yYhPyq07Le6MDAGV7rZszylU9dFgBOd4=; b=Rk0JslcNXqcZWJo1hILxim4s5VgCSe3h3B1XVI6H/qSmYwxvmfHcgQ5PD1uJ1keOZ+ jPNCyYr5rHD/qP+jqb6frN+yKAcJOnbmaqLUVEx6gZ71ClRN9z8thO7Hlv6LV362SrKT oMua6b248shbxfRIdg+IoH5BT/mfpXjDv+s5fUkKJ23hasX9CnwGSJ+UjwcC0z2jHADs 702fTzALEiwwNJu/ZM0ertSrm4GCs1f4E1ajbOdf8G97Y1o7idQqAVat6CUJzFi1iZXy p89tPHa7Xe/SRq5C/yyiF6g8yCDylerImiWmYA8eyUy1JxF+pe+8u504npLA2aFI+tiT Hgqg==
X-Gm-Message-State: ACgBeo3fwbSG5s1Ax4Zv4H35oD5Zb8FUxSKex6CoJGlI7v++Jxfbkh/a /srrjvAu/5VybqpJtqnB9ju/OUpdNzjcj+cjxstjaGE=
X-Google-Smtp-Source: AA6agR5h9wIvLAKMoqQYdiZb7mdYdPAQqtrzmWEhv+lAZv9qwUlB76XlQohdBEDlv3h23EWXnuuD79likjnH70Dc3Zg=
X-Received: by 2002:a1f:7c04:0:b0:378:323e:1e89 with SMTP id x4-20020a1f7c04000000b00378323e1e89mr14470623vkc.35.1660230005594; Thu, 11 Aug 2022 08:00:05 -0700 (PDT)
MIME-Version: 1.0
References: <20220809030711.F00DC28C1CA@107-137-68-211.lightspeed.sntcca.sbcglobal.net> <8122203e-ac66-e4d7-5a52-5d053d8fa06a@nwtime.org> <YvIXDS2EkxzI0nTh@localhost> <9d304a6f-5570-0dad-d64d-b8ade71871e3@nwtime.org> <YvIthoUI7HtKpD9E@localhost> <01a9d920-3009-fdc0-07c1-68f5563bf130@meinberg.de> <YvI8RYIUNJvPI96W@localhost> <944f32df-eb15-2bc1-2f86-0cedd7037f31@nwtime.org>
In-Reply-To: <944f32df-eb15-2bc1-2f86-0cedd7037f31@nwtime.org>
From: James Browning <jamesb.fe80@gmail.com>
Date: Thu, 11 Aug 2022 08:00:00 -0700
Message-ID: <CAFTY+dB1+_o2wpcXJ4hrjg=PGaq4fHAh3ZwFXQw+nHNTaj6tBA@mail.gmail.com>
To: "ntp@ietf.org" <ntp@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000ba9cdb05e5f86b20"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ntp/rJ_YW2UopEseyz8w6eTj_cxN0Sw>
Subject: Re: [Ntp] Antw: [EXT] Re: Quick review of WGLC for status change for draft‑ietf‑ntp‑update‑registries
X-BeenThere: ntp@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Network Time Protocol <ntp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ntp>, <mailto:ntp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ntp/>
List-Post: <mailto:ntp@ietf.org>
List-Help: <mailto:ntp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ntp>, <mailto:ntp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Aug 2022 15:00:08 -0000

On Thu, Aug 11, 2022, at 3:22 AM, Harlan Stenn <stenn@nwtime.org> wrote:

> On 8/9/2022 3:51 AM, Miroslav Lichvar wrote:
> > On Tue, Aug 09, 2022 at 12:39:02PM +0200, Martin Burnicki wrote:
> >> Of course you can have a real v4 client use autokey but send a faked v3
> >> version, in which case it might get a v3 response with autokey
> extensions.
> >>
> >> I've never heard that this caused any problem. On the contrary, the high
> >> level of compatibility between v3 and v4 made the slow changeover from
> v3 to
> >> v4 very user-friendly.
> >
> > It doesn't cause problems if you use a compatible client and server,
> > but it's out of the specification. The client shouldn't send an
> > NTPv3 request with extension fields and the server shouldn't accept it
> > and respond.
>
> V3 does not have extension fields.
>
> Sure, somebody could make a v3 response with them, but that's out of spec.
>
> Just like somebody can send a v3 or v4 packet and say it's v1.  That
> doesn't make it "true".
>

Great, someone should go and tell the people who are selling stupid 'NTP'
wall clocks.


> > The Windows NTP client and server use 64-byte MACs. They use NTPv3 and
> > I think that is ok. There are no extension fields yet which could be
> > confused with the MAC. In NTPv4 that would be a problem.
>
> Not in my experience.
>

Not to butcher lagomorphs but it seems to be 68, the adapter code is
ntpd/ntp_sign.c, and in ntpd/ntp_proto.c


> >>> That is not possible if we want to make incompatible changes in NTPv5.
> >>
> >> Yes, that's why I believe the acceptance of v5 will grow very much
> slower
> >> than the acceptance of v4.
> >
> > How long it took for NTPv4 to reach a majority of NTP traffic?
>
> The time it takes is independent of the drama involved.
>
> v3 clients talk to v4 servers perfectly well.  This has been
> demonstrated in the real world, and is also well-documented in RFC 5905.
>

Because NTP version 4 broke the tradition of making breaking changes every
version. It is being brought back.

Also, NTP packets have been 48 octets since RFC 958 and haven't changed the
leap indicator or latter 2/3.