scionassociation / scion-cp_I-D

Specification of the SCION control plane.
https://scionassociation.github.io/scion-cp_I-D/
Other
1 stars 0 forks source link

Clarify time synchronization dependency #18

Closed nicorusti closed 2 months ago

nicorusti commented 3 months ago

What are the time synchronization dependencies between routers? Do you assume NTP? What happens if clocks drift? Any dependencies must be listed. Maybe we could even have a section about dependencies. It is important as SCION is a such fundamentalc component that we must clearly list dependencies..

jiceatscion commented 3 months ago

Addressed the question of clock drift in the dataplane with: https://github.com/scionassociation/scion-dp_I-D/pull/19

jiceatscion commented 3 months ago

Also copied the formula to interpret expTime from the DP draft.

jiceatscion commented 3 months ago

Note that the time-tolerance for certificates is no-longer needed nor applied: Updated the cp draft to clarify that segments are not authenticated by certificates valid "now", but by certificates valid for the same period as the segment. Therefore current time during validation plays no role. Possibly a time offset between an AS's certificate originator and that of its core control service could play a role, but I think it's safe to assume that, being in the same AS, they can have the same time source. gRPC connections are quic/TLS connections, authenticated with the same AS certs. Subject to the same time check. No tolerance. None needed. Clarified that in the draft.

nicorusti commented 2 months ago

Finally closing this after both CP & DP are updated. Thanks a lot @jiceatscion !