[dns-operations] Allowance for inaccurate clocks

Olafur Gudmundsson ogud at ogud.com
Wed Mar 16 22:50:04 UTC 2011

On 16/03/2011 4:29 PM, Mark Andrews wrote:
> In message<a06240800c9a698ff203e@[]>, Edward Lewis writes:
>> At 10:42 +0000 3/16/11, George Barwood wrote:
>>> Anyone have views on how much allowance should be made?
>> Local policy.
> Just as a data point, I've considered using 1 day.  1 hour is too
> short when people try to correct for bad daylight saving tables and
> there have been case of machines confusing UTC and localtime which
> can be 13 hour error.

I agree with Mark, here 1 day in the past is a good time for signature
initiation time.
Some operating systems make horrible choices when installing as what the
time zone is and if the hardware clock is in UTC or local time.


More information about the dns-operations mailing list