Re: [tor-dev] Proposal 222: Stop sending client timestamps

[Maxim Kammerer <mk@xxxxxx>]

On Thu, Aug 22, 2013 at 6:46 PM, Nick Mathewson <nickm@xxxxxxxxxxxxxx> wrote:
>    Despite this late date, many hosts aren't running NTP and
>    don't have very well synchronized clocks. Even more hosts
>    aren't running a secure NTP; it's probably easy to
>    desynchronize target hosts.

Not strongly related to the proposal, but authenticated (autokey) NTP
is not really secure.
http://tools.ietf.org/html/draft-ietf-ntp-network-time-security
http://www.innovationslab.net/~brian/NTP/autokey-analysis.pdf

-- 
Maxim Kammerer
Liberté Linux: http://dee.su/liberte
_______________________________________________
tor-dev mailing list
tor-dev@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev