From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail2.tohojo.dk (mail2.tohojo.dk [IPv6:2a01:4f8:200:3141::101]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by huchra.bufferbloat.net (Postfix) with ESMTPS id F104F21F1D4 for ; Sat, 22 Mar 2014 13:00:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at example.com Received: by alrua-x1.borgediget.toke.dk (Postfix, from userid 1000) id 828341BDCD; Sat, 22 Mar 2014 21:00:21 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=toke.dk; s=201310; t=1395518422; bh=SvpO5FJecZae4Q3cAMcqEkSNfsPHazrlTmr+V0cTHb4=; h=From:To:Cc:Subject:References:Date:In-Reply-To; b=f+9uLhLTV3laUahSjc2dAe7/dbhT6n4gmUcZPQYpl00BtCdY+qOx2RzSwQZtkZqS2 xtl1Ar/V1kcFcd471r7Pyz6SDQnfdJyKfZwz563AeatotmxUiFSp/Wmy45DFuvpnSm vUakfhCEQxmpjlw7OpvRqQPGsMZPpBfGXOcWR+4w= From: =?utf-8?Q?Toke_H=C3=B8iland-J=C3=B8rgensen?= To: Simon Kelley References: <532DD9DD.8040301@thekelleys.org.uk> <871txut453.fsf@alrua-x1.karlstad.toke.dk> <532DE7A8.3010504@thekelleys.org.uk> Date: Sat, 22 Mar 2014 21:00:19 +0100 In-Reply-To: <532DE7A8.3010504@thekelleys.org.uk> (Simon Kelley's message of "Sat, 22 Mar 2014 19:42:32 +0000") Message-ID: <87ppleroks.fsf@alrua-x1.karlstad.toke.dk> Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Cc: cerowrt-devel@lists.bufferbloat.net Subject: Re: [Cerowrt-devel] DNSSEC & NTP Bootstrapping X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Mar 2014 20:00:34 -0000 --=-=-= Content-Type: text/plain Simon Kelley writes: > That would be possible: it would require care to make it work in the > face of the system time being warped by NTP. Best way may be to use > times() rather than time() Good point. Since the availability of reliable time is what we're waiting for, perhaps a large jump in the system clock could be taken to mean it has been achieved and taken as a signal to exit the grace period? With a timer for the case where the time is already accurate, of course. This would make it rather specific to this use case, though... -Toke --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBCAAGBQJTLevTAAoJEENeEGz1+utPaMIIAJJhnz/5owKVBG1lmIrpRKbT PtA3g9s79jl7+Rseq6dX0+hvdvkH99/o4YYxFqA0qe0dZGiCc6PtBDCE2NqTksMw pqO+bOfBDEw+vojSFaZYK4qA1rqUy6oG7XD8qb4KoJxwP+Z4CgFN9kK2DcPJq6sb g+5ty6YsAmAGXxZNoA5vNbl13G0POqqS0ayT0qnzwky9XWRK9gBMPjgAV7m6pQsI H0BLTzuUIp8fcq+vJm4+PqQQD5ZnVcsx40kHlw/S0K+BqBWqwuhSHUDpK2p/bup2 K0HMSjMLLS5XNWwacZOhVridHrJQ755ASkYQJ06sCjSfjh8xV0iHTXt2UloL4Gk= =eQFX -----END PGP SIGNATURE----- --=-=-=--