4 Nov
2008
4 Nov
'08
5:30 a.m.
On Mon, Nov 03, 2008 at 10:23:07PM -0800, Paul Ferguson wrote:
On Mon, Nov 3, 2008 at 10:15 PM, Glen Kent <glen.kent@gmail.com> wrote:
Hi,
I was wondering what most folks use for NTP security?
Do they use the low cost, light weight symmetric key cryptographic protection method using MD5 or do folks go in for full digital signatures and X.509 certificates (AutoKey Security)?
I'm just wondering -- in globak scheme of security issue, is NTP security a major issue?
Just curious.
- ferg
depends on your POV... in a dns context, TSIG and DNSSEC validation depend on accurate time - failure to resolve data because of a time slip might be considered a significantissue. --bill