Splitting NTS-KE out from ntpd

[Gary E. Miller]

Yo Hal!

On Wed, 02 Sep 2020 18:25:51 -0700
Hal Murray <hmurray at megapathdsl.net> wrote:

> Gary said:
> > Many people have asked for it.  They want to be able to deploy the
> > KE part on on host and have the NTP part on other hosts.   
> 
> Where is that happening?  I've missed it.

It is not happening, just a request.  It seems to raise its
hand every few weeks.

> Maybe I just skimmed to
> fast, but I don't remember any use case where running NTS-KE on a
> separate host was important.

The idea is that you want NTP on a bunch of servers, but only want your
private keys on a very secure server.  Otherwise you have to manage TPM
on every server, which is a PITA.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
	gem at rellim.com  Tel:+1 541 382 8588

	    Veritas liberabit vos. -- Quid est veritas?
    "If you can't measure it, you can't improve it." - Lord Kelvin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 851 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ntpsec.org/pipermail/devel/attachments/20200902/fd5dd20f/attachment-0001.bin>