DaemonForums  

Go Back   DaemonForums > OpenBSD > OpenBSD General

OpenBSD General Other questions regarding OpenBSD which do not fit in any of the categories below.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 2 Weeks Ago
victorvas's Avatar
victorvas victorvas is offline
Real Name: Victor
Fdisk Soldier
 
Join Date: May 2019
Posts: 66
Question ntpd.conf - google alternative

ntpd reaches out to www.google.com for time synchronizing

What is a good website I can replace google with?
Reply With Quote
  #2   (View Single Post)  
Old 2 Weeks Ago
TronDD TronDD is offline
Spam Deminer
 
Join Date: Sep 2014
Posts: 225
Default

It's not for time syncronizing exactly. A compliant webserver will send its time in a response to a request using a Date header (per RFC 7231). The time is merely used as a sanity check against the time returned by you configured timeservers which likely have no authenticity. (If they do, you can used 'trusted' instead. See ntpd.conf(5))

You can use any HTTPS server you trust to manage their private webserver keys and server time correctly.
Reply With Quote
  #3   (View Single Post)  
Old 2 Weeks Ago
IdOp's Avatar
IdOp IdOp is offline
Too dumb for a smartphone
 
Join Date: May 2008
Location: twisting on the daemon's fork(2)
Posts: 910
Default

I suggest going to ntp.org and looking for their server lists and how to use them.

I use {0,1,2}.ca.pool.ntp.org but those are in Canada, you probably want something closer to your location.
Reply With Quote
  #4   (View Single Post)  
Old 1 Week Ago
fvgit's Avatar
fvgit fvgit is offline
Spikes in tights
 
Join Date: May 2016
Location: perl -MMIME::Base64 -le 'print decode_base64("U2hlcndvb2QgRm9yZXN0")'
Posts: 229
Default

Interesting comment from Theo discussing ntpd.conf on misc@
Reply With Quote
  #5   (View Single Post)  
Old 1 Week Ago
IdOp's Avatar
IdOp IdOp is offline
Too dumb for a smartphone
 
Join Date: May 2008
Location: twisting on the daemon's fork(2)
Posts: 910
Default

Thank you very much for linking that. It seems my suggestion was dated and not best practice.
Reply With Quote
  #6   (View Single Post)  
Old 1 Week Ago
victorvas's Avatar
victorvas victorvas is offline
Real Name: Victor
Fdisk Soldier
 
Join Date: May 2019
Posts: 66
Default

Quote:
Originally Posted by fvgit View Post
Interesting comment from Theo discussing ntpd.conf on misc@
Thank you for posting this link! I'm becoming more "paranoid", which is actually a good thing to happen.
Reply With Quote
  #7   (View Single Post)  
Old 1 Week Ago
fvgit's Avatar
fvgit fvgit is offline
Spikes in tights
 
Join Date: May 2016
Location: perl -MMIME::Base64 -le 'print decode_base64("U2hlcndvb2QgRm9yZXN0")'
Posts: 229
Default

Well, to put things into perspective, I actually do remove the google constraint from the config myself and replace it with a few servers from German websites I trust. But Theo's reasoning is difficult to repudiate.

I'm still on the fence on this.
Reply With Quote
  #8   (View Single Post)  
Old 1 Week Ago
IdOp's Avatar
IdOp IdOp is offline
Too dumb for a smartphone
 
Join Date: May 2008
Location: twisting on the daemon's fork(2)
Posts: 910
Default

In my case I don't use ntpd, I just run ntpdate once a day, and if it did anything crazy to the time I would be very likely to notice.
Reply With Quote
Reply

Tags
ntpd

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Changes to ntpd hitest OpenBSD General 2 1st February 2020 06:58 PM
ntpd pawkolor OpenBSD General 4 26th October 2015 04:19 PM
ntpd when improperly set .. daemonfowl OpenBSD General 4 30th March 2012 08:30 PM
Google begins to detail Dart, a Javascript alternative J65nko News 3 11th October 2011 10:19 PM
ntpd strata too high error map7 FreeBSD General 0 17th June 2008 11:20 PM


All times are GMT. The time now is 04:36 AM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick