Re: NTS fallback?

Hello Christoph,

The idea is to prevent so-called "bidding down" attacks. I.e., instead of t=
rying to attack the protection mechanisms, the idea of such stracks is to g=
et the client to simply not use them. Not falling back to NTP without NTS w=
hen NTS fails is a way to avoid that, i.e., is fully intended.

Kind regards

Joachim

07.08.2025 22:22:03 Christoph Schittel <[email protected]>:

> Hello!
>=20
> When a server directive is specified with "nts" this server is only queri=
ed when nts service is working on this server.
> Is there no fallback to unauthenicated time transfer for servers with nts=
 option given? Like when nts services are failing or temporarily disabled o=
n the server.
>=20
> I know about "authselectmode", but this is only working between different=
 queried servers, authenticated and not authenticated.
>=20
> regards
> Christoph
>=20
> --=20
> To unsubscribe email chrony-users-request-kWFZVVI9zxvPqho9SqqRMmD2FQJk+8+b@public.gmane.org with "unsu=
bscribe" in the subject.
> For help email chrony-users-request-kWFZVVI9zxvPqho9SqqRMmD2FQJk+8+b@public.gmane.org with "help" in t=
he subject.
> Trouble?=C2=A0 Email [email protected]

-- 
To unsubscribe email chrony-users-request-kWFZVVI9zxvPqho9SqqRMmD2FQJk+8+b@public.gmane.org 
with "unsubscribe" in the subject.
For help email chrony-users-request-kWFZVVI9zxvPqho9SqqRMmD2FQJk+8+b@public.gmane.org 
with "help" in the subject.
Trouble?  Email [email protected]