[tor-dev] Proposal 222: Stop sending client timestamps
    Maxim Kammerer 
    mk at dee.su
       
    Thu Aug 22 19:14:43 UTC 2013
    
    
  
On Thu, Aug 22, 2013 at 6:46 PM, Nick Mathewson <nickm at torproject.org> wrote:
>    Despite this late date, many hosts aren't running NTP and
>    don't have very well synchronized clocks. Even more hosts
>    aren't running a secure NTP; it's probably easy to
>    desynchronize target hosts.
Not strongly related to the proposal, but authenticated (autokey) NTP
is not really secure.
http://tools.ietf.org/html/draft-ietf-ntp-network-time-security
http://www.innovationslab.net/~brian/NTP/autokey-analysis.pdf
-- 
Maxim Kammerer
Liberté Linux: http://dee.su/liberte
    
    
More information about the tor-dev
mailing list