[99404] in North American Network Operators' Group
Re: Question on Loosely Synchronized Router Clocks
daemon@ATHENA.MIT.EDU (James R. Cutler)
Thu Sep 20 15:19:15 2007
Date: Thu, 20 Sep 2007 15:18:15 -0400
To: "NANOG" <nanog@merit.edu>
From: "James R. Cutler" <james.cutler@consultant.com>
In-Reply-To: <46F112A1.7070405@iglou.com>
Errors-To: owner-nanog@merit.edu
--=====================_61814654==.ALT
Content-Type: text/plain; charset="us-ascii"; format=flowed
Kerberos does not assume clock synchronization.
Kerberos requires reasonable clock synchronization.
And, as near as I can tell, clock synchronization is not part of the
Kerberos protocol.
Kick me if I err in this.
Cutler
At 9/19/2007 08:14 AM -0400, Jeff McAdams wrote:
Stephen Sprunk wrote:
>> ... is it reasonable to assume clock synchronization in the rest
>> of our design?
> In general, it is not. I can't think of any existing protocol that
> does, actually.
Kerberos.
--
Jeff McAdams
"They that can give up essential liberty to obtain a
little temporary safety deserve neither liberty nor safety."
-- Benjamin Franklin
-
James R. Cutler
james.cutler@consultant.com
--=====================_61814654==.ALT
Content-Type: text/html; charset="us-ascii"
<html>
<body>
<font size=3>Kerberos does not assume clock synchronization.<br>
Kerberos requires reasonable clock synchronization.<br>
And, as near as I can tell, clock synchronization is not part of the
Kerberos protocol.<br><br>
Kick me if I err in this.<br><br>
<x-tab> </x-tab>Cutler<br>
<br>
At 9/19/2007 08:14 AM -0400, Jeff McAdams wrote:<br>
Stephen Sprunk wrote:<br>
>> ... is it reasonable to assume clock synchronization in the
rest<br>
>> of our design?<br><br>
> In general, it is not. I can't think of any existing protocol
that<br>
> does, actually.<br><br>
Kerberos.<br>
-- <br>
Jeff McAdams<br>
"They that can give up essential liberty to obtain a<br>
little temporary safety deserve neither liberty nor safety."<br>
-- Benjamin Franklin<br><br>
<br><br>
</font><x-sigsep><p></x-sigsep>
<font face="Courier, Courier" size=3>-<br>
James R. Cutler<br>
james.cutler@consultant.com<br>
</font></body>
</html>
--=====================_61814654==.ALT--