...all about the learning!

Thanks for the clarification. For hobbyist use, I would guess folks would
keep up with IP numbers on their own.

- dan


-----Original Message-----
From: Hal Murray [mailto:hmur...@megapathdsl.net] 
Sent: Sunday, May 29, 2016 10:17 AM
To: Dan Poirot <dtpoi...@gmail.com>
Cc: 'Hal Murray' <hmur...@megapathdsl.net>; gpsd-...@nongnu.org;
devel@ntpsec.org; hmur...@megapathdsl.net
Subject: Re: Draft Stratum 1 Microserver HOWTO is up


dtpoi...@gmail.com said:
> Is there a consensus on DDNS? There are a few services which offer 
> 'free dynamic DNS service':
...
> Would it make sense to bake DDNS registration into the recipe and move 
> away from IP numbers?

What problem are you trying to solve?

The reason for using dynamic DNS that I'm familiar with is for running a
server at home when your ISP uses DHCP and occasionally changes your IP
Address.

That would work if you are running ntpdate from cron where it does a DNS
lookup each time.  It wouldn't work if you used "server foo.xxx.xxx" since
ntpd only does one DNS lookup when it starts up and then stays locked to
that IP Address.

The pool command does drop IP Addresses if they don't respond and then does
another DNS lookup to get new addresses.  That mechanism could be added to
the server command if it uses DNS.

The pool infrastructure requires an IP Address.



dtpoi...@gmail.com said:
> Following that train of thought - all the way to the crash site - how 
> about certificates?
> Baking in certs from the 'reference' free CA may also be a Good Idea, no?

Again, what problem are you trying to solve?

The certificates packages that I'm familiar with all assume you know the
time so they can check expiration dates.  That makes it hard to use
certificates when NTP is getting off the ground.

DNSSEC also assumes it knows the time.


--
These are my opinions.  I hate spam.




_______________________________________________
devel mailing list
devel@ntpsec.org
http://lists.ntpsec.org/mailman/listinfo/devel

Reply via email to