Re:One second per second is harder than it sounds
by michaelt on Tuesday July 22, 2014 @05:36AM
(#8068043)
Clock years out of sync: All SSL certificates appear invalid.
Clock minutes out of sync: "Here's a temporary security token, I don't think it's expired" "That credential has expired" "This never came up in testing, I think I'll crash"
Clock seconds out of sync: Log files on different servers can't be merged reliably. Different requests went to different load-balanced servers and now you can't tell what order the logged events happened in.
Re:One second per second is harder than it sounds
by spydum on Tuesday July 22, 2014 @08:06AM
(#8068469)
And that last one has had many people chasing ghosts for years. I can also attest to time sync killing a number of SAML assertions and their window of validation.
Clock minutes out of sync: "Here's a temporary security token, I don't think it's expired" "That credential has expired" "This never came up in testing, I think I'll crash"
Clock seconds out of sync: Log files on different servers can't be merged reliably. Different requests went to different load-balanced servers and now you can't tell what order the logged events happened in.