Feature #8283

Research more secure htpdate time pool design

Added by adrelanos 2014-11-21 19:41:42 . Updated 2016-02-10 17:22:31 .

Status:
Confirmed
Priority:
Low
Assignee:
Category:
Time synchronization
Target version:
Start date:
2014-11-21
Due date:
% Done:

0%

Feature Branch:
Type of work:
Research
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

intrigeri wrote:
>> I can’t think of another area in which asking a hostile for advice is a
>> good idea. Maybe “if friend and foe both agree, you can be confident
>> that they’re right; if they disagree, look further” - but that’s not
>> what Tails htpdate is doing.
>
> Indeed, it should probably discard information that is diverging too
> much from what others tell us. Care to file a “research” ticket
> about it?

mailing list thread:
Tails htpdate - why use time information from neutral and foe pools?

Please research if it was more secure if you had pal_pool_1, pal_pool_2, pal_pool_3 rather than neutral and foe pools.

Subtasks

History

#1 Updated by intrigeri 2014-11-22 09:12:51

  • Subject changed from research more secure htpdate time pool design to Research more secure htpdate time pool design
  • Status changed from New to Confirmed
  • Priority changed from Normal to Low

I doubt anyone on our team will be working on this anytime soon => anyone interested, please do take it.

#2 Updated by intrigeri 2015-01-08 10:00:57

  • Category set to Time synchronization

#3 Updated by adrelanos 2015-10-27 13:51:10

I don’t think any more research is required. Because we at Whonix discussed and throughly thought this through:
https://github.com/Whonix/Whonix/issues/310
There imho is no logical defensible argument in favor of asking foe’s for something. I could perhaps rehash that discussion and make an argument in favor of my view if that is required.

#4 Updated by intrigeri 2016-02-10 17:22:31

Is the reasoning behind Whonix design decision on this topic summed up anywhere?