Closed nicorusti closed 2 months ago
Addressed the question of clock drift in the dataplane with: https://github.com/scionassociation/scion-dp_I-D/pull/19
Also copied the formula to interpret expTime from the DP draft.
Note that the time-tolerance for certificates is no-longer needed nor applied: Updated the cp draft to clarify that segments are not authenticated by certificates valid "now", but by certificates valid for the same period as the segment. Therefore current time during validation plays no role. Possibly a time offset between an AS's certificate originator and that of its core control service could play a role, but I think it's safe to assume that, being in the same AS, they can have the same time source. gRPC connections are quic/TLS connections, authenticated with the same AS certs. Subject to the same time check. No tolerance. None needed. Clarified that in the draft.
Finally closing this after both CP & DP are updated. Thanks a lot @jiceatscion !
What are the time synchronization dependencies between routers? Do you assume NTP? What happens if clocks drift? Any dependencies must be listed. Maybe we could even have a section about dependencies. It is important as SCION is a such fundamentalc component that we must clearly list dependencies..