Workingungiyar Aiki na Injin yanar gizo (IETF), wanda ke da alhakin ci gaba da ladabi da fasahar Intanet, ya kammala kirkirar RFC don yarjejeniyar Yarjejeniyar Tsaro na Yanar Gizo (NTS) kuma ya wallafa ƙayyadaddun abubuwan da ke hade da mai ganowa RFC 8915.
RFC an karɓi matsayin "Matsakaicin Ba da shawara", bayan wanne aiki ne zai fara bawa RFC matsayin Matsakaicin Tsari, wanda a zahiri yana nufin cikakken dattako da ladabi da la'akari da duk bayanan da aka yi.
NTS daidaitacce muhimmin mataki ne don haɓaka tsaro na sabis ɗin aiki tare lokaci da kuma kare masu amfani daga hare-haren da ke kwaikwayon uwar garken NTP wanda abokin ciniki ke haɗuwa da shi.
Ana iya amfani da magudi na maharan don saita lokacin da bai dace ba don daidaita tsaron wasu ladabi masu saurin ɗaukar lokaci, kamar TLS. Misali, canza lokaci na iya haifar da kuskuren fassarar bayanan inganci don takaddun TLS.
Har yanzu, da NTP da ɓoye-ɓoye na tashoshin sadarwa ba su ba da tabbacin cewa abokin ciniki yana hulɗa da manufa kuma ba tare da sabar NTP ba, kuma ingantaccen maɓalli bai tafi al'ada ba saboda yana da rikitarwa don saitawa.
A cikin fewan watannin da suka gabata, mun ga yawancin masu amfani da sabis ɗinmu na lokaci, amma ƙalilan ne suke amfani da Tsaron Lokacin Tsare. Wannan ya bar kwamfutoci cikin saukin kai hare-hare wadanda suke kwaikwayon uwar garken da suke amfani dasu don samun NTP. Wani ɓangare na matsalar shine rashin wadatar NTP daemons waɗanda ke tallafawa NTS. An warware wannan matsalar yanzu: chrony da ntpsec duk suna goyan bayan NTS.
nts yana amfani da abubuwan more rayuwar jama'a (PKI) kuma yana ba da izinin amfani da TLS da ingantaccen ɓoye tare da bayanan haɗin gwiwa (AEAD) don kare bayanan sirri ta hanyar sadarwar abokin ciniki ta hanyar Sadarwar Lokacin Sadarwa (NTP).
nts ya hada da ladabi guda biyu daban: NTS-KE (Kafa mabuɗin NTS don ɗaukar ingantaccen farko da sasantawa akan TLS) da NTS-EF (Filayen fadada NTS, masu alhakin ɓoyewa da kuma tabbatar da zaman aiki tare lokaci).
nts fieldsara filayen da aka faɗaɗa zuwa fakiti NTP kuma tana adana duk bayanan jihar ne kawai ta bangaren abokin harka ta hanyar hanyar isar da cookie. An sadaukar da tashar tashar sadarwa ta 4460 don kula da haɗin NTS.
Lokaci shine tushen tsaro ga yawancin ladabi, kamar TLS, waɗanda muke dogaro dasu don kare rayukanmu ta yanar gizo. Ba tare da wani takamaiman lokaci ba, babu yadda za ayi a tantance ko takardun shaidan sun ƙare ko a'a. Rashin wata yarjejeniya mai sauƙin aiwatarwa ta kasance matsala ga tsaron Intanet.
An fara aiwatar da ayyukan farko na daidaitaccen NTS a cikin sigogin da aka saki kwanan nan na NTPsec 1.2.0 da Chrony 4.0.
Chrony yana ba da abokin ciniki na NTP daban da aiwatar da sabar wanda ake amfani dashi don aiki tare daidai lokacin akan rarraba Linux daban-daban, gami da Fedora, Ubuntu, SUSE / openSUSE, da RHEL / CentOS.
An haɓaka NTPsec ƙarƙashin jagorancin Eric S. Raymond kuma shi ne cokali mai yatsa na aiwatar da yarjejeniyar yarjejeniyar NTPv4 (NTP Classic 4.3.34), ya mai da hankali kan sake tsara lambar lambar don inganta tsaro (tsabtace tsohuwar lambar, hanyoyin rigakafin kutse da ayyukan kariya) aiki tare da ƙwaƙwalwa da sarƙoƙi).
Ba tare da NTS ko ingantaccen maɓallin kewayawa ba, babu tabbacin cewa kwamfutarka tana magana da NTP da kwamfutar da kake tsammani. Tabbatar da maɓallin Symmetric yana da wahalarwa da kuma raɗaɗi don daidaitawa, amma har zuwa kwanan nan ita ce kawai ingantacciyar hanyar da aka ƙayyade don tabbatar da NTP. NTS tana amfani da aikin da ke shiga cikin kayan aikin gidan yanar gizo don tabbatar da saitunan NTP kuma tabbatar cewa lokacin da kake saita kwamfutarka don magana da time.cloudflare.com, wannan shine sabar da kwamfutarka ke samun lokaci daga.
Idan kana son karin bayani game da shi, zaka iya duba bayanan A cikin mahaɗin mai zuwa.