undefined | Better HN

story

0 pointsCamperBob213y ago0 comments

In my experience Dropbox won't sync if the local system time is too far off. Makes no sense IMO, but that seems to be how it works.

0 comments

arashf13y ago

that's just SSL cert validation :-)

CamperBob2OP13y ago

Seems questionable to use the local time for that. System time isn't exactly a trusted quantity, is it?

jonemo13y ago

iOS does it that way. My iPod touch always forgets date and time when it runs out of battery. After restart you can't do anything in the App Store or on https websites before you've set the correct date (it defaults to 1970 which is when the iPod was first introduced I believe).

Tloewald13y ago

1970 ipod would be awesome.

Lord_DeathMatch13y ago

1970 is Unix Epoch :)

IE, Unix time started then.

arashf13y ago

hmmm, I think it's fairly common practice amongst similar software (i.e. firefox, chrome, etc.) to use system time as a signal that you may be connecting to a server that has an outdated SSL certificate. while it's not perfect, it's a good first order security precaution to take (in addition to verifying the CA) to ensure you are talking to who you think you are.

astrange13y ago

Certificate validation for 802.1x networks relies on this, with the effect that you sometimes can't get an internet connection without fixing your clock.

happyhappy13y ago

What other time source would you propose using?

CamperBob2OP13y ago

If you know you're on a network -- and Dropbox does -- then I'd fetch the time from a time server somewhere, perhaps Dropbox itself, or time.nist.gov. Of course, then you're at the mercy of the user's hosts file, I suppose.

If the time is just used to check for certificate expiration, maybe nobody considers it worth worrying about. Which I guess is fine as far as it goes... but the other day I couldn't get Dropbox to do its thing when my clock was only a few hours off. It didn't seem likely that an SSL date check was involved in that case.

1 more reply

j / k navigate · click thread line to collapse

0 comments

arashf13y ago

that's just SSL cert validation :-)

CamperBob2OP13y ago

Seems questionable to use the local time for that. System time isn't exactly a trusted quantity, is it?

jonemo13y ago

Tloewald13y ago

1970 ipod would be awesome.

Lord_DeathMatch13y ago

1970 is Unix Epoch :)

IE, Unix time started then.

arashf13y ago

astrange13y ago

Certificate validation for 802.1x networks relies on this, with the effect that you sometimes can't get an internet connection without fixing your clock.

happyhappy13y ago

What other time source would you propose using?

CamperBob2OP13y ago

1 more reply

j / k navigate · click thread line to collapse