Garrett, You are misinformed. See the briefings on the NTP project page.
Dave Garrett Wollman wrote: > In article <[EMAIL PROTECTED]>, > Steve Kostecke <[EMAIL PROTECTED]> wrote: > > >>What has happened is that Vladimir has discovered the fact the Autokey >>will "degrade" to TC in the event that parameters for no other Identity >>Scheme are present. So he is asking "what's the point" of IFF (and, by >>extension, GQ and MV) if the Authentication will succeed just on the >>strength of the host parameters. > > > Say what? > > So lemme get this straight... I can configure my NTP servers so that > any autokey-using client will believe they are authentic, based solely > on a bit that was set in an unauthentic certificate? > > That's even more broken than I thought. > > -GAWollman > _______________________________________________ questions mailing list [email protected] https://lists.ntp.isc.org/mailman/listinfo/questions
