TLDR Tech / Launches
Meta's time service now uses NTS for enhanced security
Meta's public time service at nts.meta.com now incorporates Network Time Security (NTS), adding cryptographic verification to Network Time Protocol (NTP) communications to prevent manipulation and man-in-the-middle attacks. The company has released the protocol, server, and client code as open source via its GitHub Time library, utilizing a stateless cookie approach with shared secrets for key generation. The authors emphasize the need for broader adoption, especially on mobile operating systems like Android and iOS, where default time clients still transmit unauthenticated data.
Read the full story