On 01/13/2016 06:10 AM, Theo de Raadt wrote:
$ fgrep constraint /etc/ntpd.conf constraints from "https://www.google.com"; $www.google.com and other Google services are not accessible from countries like China or Vietnam. It's easy enough for people to change their ntpd.conf if necessary but how about using a default value that is more likely to work for everyone? Something like https://www.un.org/ for example.That looks like a centralized service operated on a single provider network without global load balancing "features", the DNS TTL alone hints this would be unsuitable. Probably not built to the same scale, does not feel right to me. There are are a lot of variables involved in making a selection, and the result is certainly imperfect. I get where you are coming from, but you can probably see why we currently choose what we do.
What about using https://www.akamai.com?
smime.p7s
Description: S/MIME Cryptographic Signature
