[ntpwg] Pending NTP WG Last Call on Autokey

TS Glassey tglassey at earthlink.net
Sat May 17 17:16:16 UTC 2008


Danny - sometimes you crack me up.

----- Original Message ----- 

>>
>> I doubt the folks here need a judge to tell them that timekeeping is 
>> important to many aspects of social as well as technical  infrastructure 
>> :-)
>>

Actually we had exactly that convo with Judge Facciola at RSA2008 in San 
Francisco a couple of weeks ago. We plan to have a similar one at RSA2008 
London in October too if they let us.

>
> The judge didn't say that either.

Not true - the case is a matter where the policy terminated prior to a 
lightning strike that would have been covered under the poilicy. So how is 
time not specific to it?

>The judge only discusses what is needed to make evidence stored or sourced 
>on a computer or other electronic devices admissible as evidence and how 
>they are to introduce it and with what ancillary proofs and witnesses.

You crack me up - this isnt for just Judges its for Jury's too. Anyone who 
doesnt plan a good-evidence model with proofs which can be explained and 
proved to 'the average person on the street'  is gambling with IP that may 
cost them everything. Whether you like it or not or even believe it, the 
reality is that culture is being flattened and many of the processes which 
used to provide multiple-first person attestations - ones which were used to 
support assertions' of Integrity have been collapsed into mechanical or more 
autonomic processes, and as such the processes we implement are not as 
reliable from an attestation standpoint that they used to be. Scary thought 
that - add more liers to a process and it gets more reliable - but hey it is 
what it is.

My biggest problem is that this group isnt focused on evidence or the 
creation of it or in coming up with Industry Standards for how NTP 
transactions should work. This group has refused to produce a standard for 
the performance of NTP which is why there is now OpenNTP and other 
implementations.

> There is no discussion of what would happen if the computer was off by 5 
> minutes or an hour or three days.

Sure there is - the evidence would be disqualified. But hey dont believe 
me - lets get your corporate Counsel's opinion on this.

How about this - we allow your client's to voice their comments too on what 
they were led to believe that these systems produce as evidence.  No? I 
didnt think you would want to do that but hey if you change your mind then 
lets rock and roll!

>
> Danny
>> The questions are how and when.
>>
>> Rob 



More information about the ntpwg mailing list