More Memory Safety for Let's Encrypt: Deploying ntpd-rs

Re:More Memory Safety for Let's Encrypt: Deploying ntpd-rs by woodruffw on Monday June 24, 2024 @07:45PM (#40782473)

I don’t think NTP uses TLS by default. The closest equivalent I can find online is NTS, which was only standardized in 2020 (and for which I can’t find clear adoption numbers).

(But regardless: “the transport layer is secure” is not a good reason to leave memory unsafe code on the network boundary. Conventional wisdom in these settings is to do the “defense in depth” thing and assume that transport security can be circumvented.)

[ Parent | on HN ]

Re:More Memory Safety for Let's Encrypt: Deploying ntpd-rs by mcpherrinm on Monday June 24, 2024 @07:51PM (#40782525)

ntpd-rs supports NTS and we (Let’s Encrypt) are using it a little bit. But it is far from having any wide adoption yet.

There aren’t many public NTS servers: https://netfuture.ch/public-nts-server-list/ and https://github.com/jauderho/nts-servers have some listed.

[ Parent | on HN ]