On 2013-09-10, at 16:52, Russ Housley <housley(_at_)vigilsec(_dot_)com> wrote:
NTP can be used to get time from an IP address. I understand all of the
reasons why a DNS name is preferred, but this a bootstrapping problem.
Retrieval of root zone KSK trust anchors requires a DNS name, however (and you
can't assume that the active KSK when the router left the factory is the same
as the active KSK when the router was taken out of the box).
Joe