]> Network Time Foundation

P.O. Box 918 Talent, OR 97540 US stenn@nwtime.org

Network Time Foundation

P.O. Box 918 Talent, OR 97540 US mills@udel.edu

Network Time Foundation

P.O. Box 918 Talent, OR 97540 US prindeville@ntp.org

General Internet Engineering Task Force NTP This document describes the Key Exchange commands that are included in the NTP TCP Services protocol, which is used to implement the Secure Network Time protocol.

The NTP Secure Network Time proposal relies on the secure pre-exchange of information to create and validate NTP MACs, This secure pre-exchange is performed using NTP TCP Services. This document describes that protocol.

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119.

To perform the key exchange for Secure Network Time, one side opens a TCP connection to the other host, performs any initial handshake, and SHOULD issue a STARTTLS directive to create a secure channel between the two processes. Once that has been done, ... RFC 5705 RFC 7301 [Show how this works for Client/Server mode] [Show how this works for symmetric mode] [Show how this work for manycast/multicast] [Show how this would work for broadcast mode where the client can open a connection to the server]

TBD

Additional information TBD

&RFC2119; &RFC5705; &RFC7301; &RFC5905; &RFC5906;