On 4/7/2016 6:28 AM, Sharon Goldberg wrote:
> 
> This non-backwards compatible feature would therefore only be used by
> systems that need it, eg those that have two IP addresses. All other
> systems could limit the amount of information being leaked in their
> refID by using my proposal.
> 

The number of systems that don't have multiple addresses these days can
probably be counted on one hand. All newer O/S's support both IPv4 and
IPv6 addresses. Furthermore NTP has broadcast and multicast modes so
packets can also arrive over those addresses as well.

Harlan and I had a discussion on this yesterday and now I remember why
the current preferred server's address is being used in the refID. At
the time it was implemented it was meant to prevent timing loops and
security was not a worry. In today's world that's the primary worry.

Danny

_______________________________________________
TICTOC mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/tictoc

Reply via email to