|
Here are the latest ideas about Ubuntu that have been approved. |
|
Secure Network TIme Synchronization
|
|
Written by slashdotaccount the 16 Aug 12 at 00:38.
Global category: Security.
New
|
|
Currently Ubuntu gets sets it's system clock over unauthenticated NTP. Thus, any man in the middle can modify answers from NTP servers and the client's or server's operating system has no way to recognize that, only hope the user will recognize and act accordingly.
Correct time is absolutely crucial for many security related things. Some systems do not have a hardware clock or hardware clock is defunct (battery low). If an adversary managers to set the time several years back, he can let the user accept already revoked, broken, expired certificates. Replay old, broken, outdated, known vulnerable updates etc.
|
|
|
Time and Date is hard to tell if it is synced to a ntp server.
|
|
Written by readmanr the 29 Nov 09 at 14:06.
Global category: System.
New
|
|
In System > Administration > Time and Date Settings, if you have chosen to "Keep synchronised with Internet servers" and have a server selected, there is absolutely nothing to let you know it has syncronised with the server successfully or not. Thus you do not know whether the time is incorrect or correct.
|
|
|
Time server (ntp) configuration not clever enough
|
|
Written by gazilla the 10 Jun 09 at 23:45.
Global category: Server.
New
|
|
If you install the NTP daemon (time server) the config file points to ntp.ubuntu.com (an obvious Ubuntu mod).
While we are glad that Canonical maintains a time server for this purpose, it is not the cleverest approach. The problems include undue load on the Canonical server (when total world domination is achieved) and the introduction of a single point of failure. Also, the round trip time from client to server will affect the timekeeping. Shorter network paths, which usually come from geographically closer servers, are always preferred. Furthermore, for better results, more than one time server should be listed.
|
|
|
Optional nptdate before activating ntpd
|
|
Written by PoolSnoopy the 1 Dec 08 at 03:28.
Global category: Usability.
New
|
|
When a user turns on time synchronisation it would be great to get asked for a "hard" sync with ntpdate before running ntpd. Imagine your clock being way off the correct time. I suppose that a normal user would be surprised finding that syncing the clock via internet does not set the correct time immediately.
|
|
|
|
