More word to nts.adoc
    Hal Murray 
    hmurray at megapathdsl.net
       
    Mon Jan 14 11:50:49 UTC 2019
    
    
  
I've started adding references to the draft.
Ian: I didn't touch your recent edits.
You said "encrypts the rest of the data"
I think we are authenticating rather than encrypting.
The new cookies returned from the NTP server are encrypted.  I think that's at 
a different
layer.  The AEAD stuff is setup to encrypt and the packet format has a slot 
for the cypher text, but I don't think we will use that.  Please let me know 
if you find something.
Gary: A few days ago, we were discussing storing the master keys on disk so 
the NTP-S and NTS-S boxes didn't need a (network) communication channel.  I 
think we want to be able to put a communication channel in there.  Consider:
  One NTS server for multiple NTP clients.
  Multiple NTS servers supporting the same name for load sharing or better 
routing.
-- 
These are my opinions.  I hate spam.
    
    
More information about the devel
mailing list