{"id":96270,"date":"2020-10-10T01:42:13","date_gmt":"2020-10-09T23:42:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts"},"modified":"2020-10-10T01:42:13","modified_gmt":"2020-10-09T23:42:13","slug":"vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","title":{"rendered":"La sortie des serveurs NTP NTPsec 1.2.0 et Chrony 4.0 avec le support du protocole s\u00e9curis\u00e9 NTS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Le comit\u00e9 IETF (Internet Engineering Task Force), qui s'occupe du d\u00e9veloppement des protocoles et de l'architecture d'internet, <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/nts-is-now-rfc\/\">a termin\u00e9<\/a><\/noindex> \u00c9laboration du RFC pour le protocole NTS (Network Time Security) et publication de la sp\u00e9cification associ\u00e9e sous l'identifiant <noindex><a rel=\"nofollow\" href=\"https:\/\/www.rfc-editor.org\/info\/rfc8915\">RFC 8915<\/a><\/noindex>. La RFC a obtenu le statut de \u00ab Norme Propos\u00e9e \u00bb, apr\u00e8s quoi le travail commencera pour donner \u00e0 la RFC le statut de Norme \u00c9bauche (Draft Standard), ce qui signifie en fait une stabilisation compl\u00e8te du protocole et la prise en compte de tous les commentaires formul\u00e9s. <\/p>\n<p>La standardisation du NTS constitue une \u00e9tape cruciale pour am\u00e9liorer la s\u00e9curit\u00e9 des services de synchronisation de temps pr\u00e9cis et prot\u00e9ger les utilisateurs contre les attaques imitant un serveur NTP auquel se connecte le client. Les manipulations des attaquants, qui consistent \u00e0 \u00e9tablir un temps incorrect, peuvent compromettre la s\u00e9curit\u00e9 d'autres protocoles sensibles au temps, tels que le TLS. Par exemple, un changement de temps peut entra\u00eener une mauvaise interpr\u00e9tation des donn\u00e9es concernant l'activit\u00e9 des certificats TLS. Jusqu'\u00e0 pr\u00e9sent, le NTP et le chiffrement sym\u00e9trique des canaux de communication n'ont pas permis de garantir que le client interagisse avec le serveur NTP cibl\u00e9 plut\u00f4t qu'avec un serveur falsifi\u00e9, tandis que l'authentification par cl\u00e9s n'a pas pris de l'ampleur en raison de sa complexit\u00e9 de configuration.<\/p>\n<p>Le NTS utilise des \u00e9l\u00e9ments d'infrastructure \u00e0 cl\u00e9 publique (PKI) et permet d'utiliser le TLS et le chiffrement authentifi\u00e9 AEAD (Authenticated Encryption with Associated Data) pour prot\u00e9ger cryptographiquement l'interaction entre le client et le serveur par le protocole NTP (Network Time Protocol). Le NTS comprend deux protocoles distincts : NTS-KE (NTS Key Establishment pour le traitement de l'authentification initiale et la n\u00e9gociation des cl\u00e9s sur TLS) et NTS-EF (NTS Extension Fields, responsable du chiffrement et de l'authentification de la session de synchronisation temporelle). Le NTS ajoute plusieurs champs \u00e9tendus aux paquets NTP et conserve toutes les informations de l'\u00e9tat uniquement du c\u00f4t\u00e9 client, en utilisant un m\u00e9canisme de transfert de cookies. Un port r\u00e9seau 4460 est attribu\u00e9 \u00e0 la gestion des connexions via le protocole NTS.<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/blog-cloudflare-com-assets.storage.googleapis.com\/2020\/10\/pasted-image-0.png\"><img decoding=\"async\" alt=\"La sortie des serveurs NTP NTPsec 1.2.0 et Chrony 4.0 avec le support du protocole s\u00e9curis\u00e9 NTS\" src=\"\/wp-content\/uploads\/2020\/10\/f97d82315d5964dc0cbbc22d95586ec3.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Les premi\u00e8res mises en \u0153uvre du NTS standardis\u00e9 ont \u00e9t\u00e9 propos\u00e9es dans les versions r\u00e9cemment publi\u00e9es <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.ntpsec.org\/2020\/10\/06\/version-1.2.0.html\">NTPsec 1.2.0<\/a><\/noindex> et <noindex><a rel=\"nofollow\" href=\"https:\/\/listengine.tuxfamily.org\/chrony.tuxfamily.org\/chrony-announce\/2020\/10\/msg00000.html\">Chrony 4.0<\/a><\/noindex>. <noindex><a rel=\"nofollow\" href=\"https:\/\/chrony.tuxfamily.org\/\">Chrony<\/a><\/noindex> repr\u00e9sente une mise en \u0153uvre ind\u00e9pendante du client et du serveur NTP, utilis\u00e9e pour synchroniser le temps pr\u00e9cis sur diverses distributions Linux, y compris Fedora, Ubuntu, SUSE\/openSUSE et RHEL\/CentOS. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.ntpsec.org\/\">NTPsec<\/a><\/noindex> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47362\">\u00e9volue<\/a><\/noindex> sous la direction d'Eric Raymond (Eric S. Raymond) et est un fork de l'impl\u00e9mentation de r\u00e9f\u00e9rence du protocole NTPv4 (NTP Classic 4.3.34), ax\u00e9 sur la refonte de la base de code pour am\u00e9liorer la s\u00e9curit\u00e9 (nettoyage du code obsol\u00e8te, m\u00e9thodes de pr\u00e9vention d'attaques et fonctions s\u00e9curis\u00e9es pour la gestion de la m\u00e9moire et des cha\u00eenes).<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Source : <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53862\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u0438\u0442\u0435\u0442 IETF (Internet Engineering Task Force), \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 RFC \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 NTS (Network Time Security) \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0438\u043c \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c RFC 8915. RFC \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0442\u0430\u0442\u0443\u0441 &#171;\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430&#187;, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u043d\u0451\u0442\u0441\u044f \u0440\u0430\u0431\u043e\u0442\u0430 \u043f\u043e \u043f\u0440\u0438\u0434\u0430\u043d\u0438\u044e RFC \u0441\u0442\u0430\u0442\u0443\u0441\u0430 \u0447\u0435\u0440\u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 (Draft Standard), \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0437\u043d\u0430\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u043d\u0443\u044e \u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0438 \u0443\u0447\u0451\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":96271,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-96270","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u0438\u0442\u0435\u0442 IETF (Internet Engineering Task Force), \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a NTP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 NTPsec 1.2.0 \u0438 \u0421hrony 4.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 NTS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u0438\u0442\u0435\u0442 IETF (Internet Engineering Task Force), \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-09T23:42:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-09T23:42:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Publication des serveurs NTP NTPsec 1.2.0 et Chrony 4.0 avec support du protocole s\u00e9curis\u00e9 NTS | ProHoster","description":"Le comit\u00e9 IETF (Internet Engineering Task Force), qui s'occupe du d\u00e9veloppement des protocoles et de l'architecture de l'internet, a termin\u00e9.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a NTP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 NTPsec 1.2.0 \u0438 \u0421hrony 4.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 NTS | ProHoster","og:description":"\u041a\u043e\u043c\u0438\u0442\u0435\u0442 IETF (Internet Engineering Task Force), \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-09T23:42:13+00:00","article:modified_time":"2020-10-09T23:42:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"96270","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:47:23","updated":"2022-10-01 20:34:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/96270","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=96270"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/96270\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/96271"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=96270"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=96270"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=96270"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}