Using NTP server protected by DNSSEC?

[XIII]

Using a NTP server protected by DNSSEC will probably not work because the router has no correct time yet after a reboot?

Would this help? How?

https://marc.info/?l=openbsd-tech&m=156102757301757&w=2

Is anyone already using such a configuration? How?

 

[bbunge]

Using a NTP server protected by DNSSEC will probably not work because the router has no correct time yet after a reboot?

Would this help? How?

https://marc.info/?l=openbsd-tech&m=156102757301757&w=2

Is anyone already using such a configuration? How?

About 6 months ago when stubby was an add on we used faketc or something like that to work around time clock issues. Current Merlin firmware has that issue solved.

 

[Bamsefar]

Why not use static IP address instead of DNS name resolution?

 

[XIII]

Why not use static IP address instead of DNS name resolution?

Because the provider reserves the right to change the IP.

(They explicitly tell users not to depend on the IP)