Re: attacking hsts through ntp

[Stephen Röttger <stephen.roettger () gmail com>]

> The solution would be to have a more reliable PC time. How do we do
that?

We're currently working on an IETF draft to bring authentication to NTP:
https://tools.ietf.org/html/draft-ietf-ntp-network-time-security-04 and
would be happy for people to take a look and give feedback.
If you don't want to read the draft, let me know and I will outline the
protocol for you.