←back to thread

299 points gastonmorixe | 1 comments | | HN request time: 0s | source
Show context
mhovd ◴[] No.45898645[source]
I am surprised that NTP project is not funded, fully or partially, by larger organizations or governments, given the criticality of the project.
replies(8): >>45898658 #>>45898731 #>>45898775 #>>45898921 #>>45899060 #>>45899179 #>>45899269 #>>45899540 #
nickelpro ◴[] No.45899269[source]
The reference implementation, while historically important, has largely been displaced by more secure/performant implementations (ntpsec, chrony), or by in-house implementations (Amazon, Google).

Notably NTPd doesn't support leap-smear, which means those who absolutely must have monotonic time can't use it at all.

replies(3): >>45899310 #>>45899969 #>>45900271 #
tptacek ◴[] No.45899969[source]
Who's running ntpsec?
replies(2): >>45900183 #>>45900286 #
mlichvar ◴[] No.45900286[source]
The major Linux distributions replaced ntp with ntpsec. A better question would be who is still running ntp. I know about FreeBSD and NetBSD.

ntpsec as a project seems to be doing ok. They are releasing new versions, fix reported issues, accept patches, and develop the code publicly. While ntp still has a huge list of acknowledged but unfixed CVEs.

replies(2): >>45900644 #>>45901155 #
1. Palomides ◴[] No.45900644{4}[source]
is that true? ubuntu and red hat for example use chrony or systemd-timesyncd