What's left to doo on NTS

[Hal Murray]

> And the NTS-KE and NTPD are NOT on the same host?

No.  I misinterpreted your question.


>> I don't understand that use case.  Without checking the certificate,
>> you have no real security.
> Not complete security, but at least encryption.  And there are levels of
> validation.  If you are off net, you can't completely validate the cert, but
> you can partially validate it.  Maybe you would want to pin it.

What does partial validation mean?  What does "pin it"? mean


-- 
These are my opinions.  I hate spam.