REFCLOCK rises again

Richard Laager rlaager at wiktel.com
Tue Mar 5 18:46:29 UTC 2019


On 3/5/19 12:45 PM, Gary E. Miller via devel wrote:
> Yo Eric!
> 
> On Tue, 5 Mar 2019 02:11:52 -0500
> "Eric S. Raymond via devel" <devel at ntpsec.org> wrote:
> 
>>> That would leave the configure option.  I've never used it.  
>>
>> I think we can justify both removals on security. If Mode 6 is a
>> read-only channel there can never be any exploits over it.  That's
>> a significant gain in provable bulletproofness.
>>
>> You want to reconfure your ntpd?  Bounce it. This won't happen often.
> 
> Ugh, wrong.  I've got to agree with Achim here.  It takes days for
> my ntpd's to converge, that is why you don't bounce it often.

How often are you reconfiguring your running ntpd today, and by what
mechanism (i.e. are you using the Mode 6 writable parameter(s) being
proposed for removal)?

-- 
Richard

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ntpsec.org/pipermail/devel/attachments/20190305/206d4d87/attachment-0001.bin>


More information about the devel mailing list