Re: Security and standalone Stratum 1.

2016-05-28 Thread Eric S. Raymond
Clark B. Wierda : > A few thoughts: > > If you need one time source, you can easily argue for two. If the > suggested minimum is three for stability, you can argue for N+1. Of course we need one time source, and by hypothesis we have one - in the tesr farm case, the HAT on a pi. I'm not seeing

Re: Security and standalone Stratum 1.

2016-05-28 Thread Clark B. Wierda
A few thoughts: If you need one time source, you can easily argue for two. If the suggested minimum is three for stability, you can argue for N+1. If I have a tower that can be damaged, a secondary site is easier to handle. You do not get true diversity and you are subject to interference, but

Re: Security and standalone Stratum 1.

2016-05-28 Thread Eric S. Raymond
OK, I've been meaning to get back to this for a while. It bears on the question of what to put in the ntp.conf file in the HOWTO. (Heads-up, Mark. Significant policy decision in play.) Hal Murray : > > e...@thyrsus.com said: > > Gary E. Miller : > >> 5. Disallow internal system to seek NTP from

Re: Security and standalone Stratum 1.

2016-05-11 Thread Hal Murray
e...@thyrsus.com said: > Gary E. Miller : >> 5. Disallow internal system to seek NTP from other sources >> beyond your edge routers. > But now I learn that we apparently can't do that, because (according to > Gary) a Stratum 1 requires a minimum of three good chimers for the > source-selection alg

Re: Security and standalone Stratum 1.

2016-05-11 Thread Gary E. Miller
Yo Eric! On Wed, 11 May 2016 14:28:05 -0400 "Eric S. Raymond" wrote: > Gary E. Miller : > > 5. Disallow internal system to seek NTP from other sources beyond > > your edge routers. > > But now I learn that we apparently can't do that, because (according > to Gary) a Stratum 1 requires a minim

Security and standalone Stratum 1.

2016-05-11 Thread Eric S. Raymond
Gary E. Miller : > 5. Disallow internal system to seek NTP from other sources beyond your > edge routers. But now I learn that we apparently can't do that, because (according to Gary) a Stratum 1 requires a minimum of three good chimers for the source-selection algoritms to stay sane. This strkes