Browse Source

Perform contraint validation against 9.9.9.9 and 2620:fe::fe also (which

avoids DNS lookups entirely, but yes this https is correctly validated)
long discussions with otto, florian, and the quad9 crew.
OPENBSD_6_7
deraadt 5 years ago
parent
commit
daf113ff2d
1 changed files with 5 additions and 2 deletions
  1. +5
    -2
      src/etc/ntpd.conf

+ 5
- 2
src/etc/ntpd.conf View File

@ -1,8 +1,11 @@
# $OpenBSD: ntpd.conf,v 1.15 2019/07/04 05:19:31 deraadt Exp $
# $OpenBSD: ntpd.conf,v 1.16 2019/11/06 19:04:12 deraadt Exp $
# #
# See ntpd.conf(5) and /etc/examples/ntpd.conf # See ntpd.conf(5) and /etc/examples/ntpd.conf
servers pool.ntp.org servers pool.ntp.org
server time.cloudflare.com server time.cloudflare.com
sensor * sensor *
constraints from "https://www.google.com"
constraint from "9.9.9.9" # quad9 v4 without DNS
constraint from "2620:fe::fe" # quad9 v6 without DNS
constraints from "www.google.com" # intentionally not 8.8.8.8

Loading…
Cancel
Save