Subject: [saag] NTP WG summary (on security related topics...) @ IETF 95

From: Karen O'Donoghue <[email-masked]>
Date: Thu, 7 Apr 2016 17:57:15 +0000

The NTP WG is working on two security related topics:
- Network Time Security
- NTP BCP

The Network Time Security work is comprised of three drafts:
https://datatracker.ietf.org/doc/draft-ietf-ntp-network-time-security/
https://datatracker.ietf.org/doc/draft-ietf-ntp-using-nts-for-ntp/
https://datatracker.ietf.org/doc/draft-ietf-ntp-cms-for-nts-message/

This suite of documents is intended to replace RFC 5906 on the NTPv4 Autokey Specification
https://datatracker.ietf.org/doc/rfc5906/
RFC 5906 is Informational, has known security flaws, and is not widely used in the wild.

A WGLC call was issued on 1 March 2016. Numerous comments were received. This week’s meeting focused on general discussions related to the resolution of these comments. There will be a small design team to address WGLC comments. A second WGLC is expected.

Additionally, the NTP WG is working on an NTP BCP
https://datatracker.ietf.org/doc/draft-reilly-ntp-bcp/
The motivation for this document is to address operational issues related to NTP included some that have security and stability impacts on the Internet. Completion of this document has been slow, and contributions are welcome.