Re: NTP security
> So what is the most secure way of syncing time on a server ?
Coupling your server directly to an atomic clock, or some other source of
"hard" time, yeilds no network reliance at all, and is the most secure way.
Using bug free software is the most secure way to synchronize over a network.
ntpd could probably benefit from a good auditing as it is a reference
implmentation and those tend to get a rather unwieldy code-base. (BIND
being a prime example)
> I noticed that /etc/services has a tcp entry for ntp. Is there any way
> (short of changing the code) to coax ntp to use tcp instead of udp ?
No, UDP is intrinsic to how NTP works.
--
Jamie Heilman http://audible.transient.net/~jamie/
"Paranoia is a disease unto itself, and may I add, the person standing
next to you may not be who they appear to be, so take precaution."
-Sathington Willoughby
Reply to: