[outages] DNS SERVFAIL for nist.gov

[Jay R. Ashworth]

----- Original Message -----
> From: "Matthew Huff via Outages" <outages at outages.org>

> Of course.
> 
> Like I stated in the original email, we don’t use NIST for time sync. We
> actually have a GPS and a PTP feed.
> 
> WE MUST, HOWEVER, VALIDATE OUR SYSTEM TIMES VERSUS THE INTERNET NIST SERVERS VIA
> FINRA REGULATIONS
> 
> Yes, it is stupid
> 
> No, it isn’t a good idea
> 
> FINRA specifically state that we MUST run a comparison and log any differences
> between our current time and Internet NIST servers. I have challenged them on
> this a number of times, but with no luck.
> 
> if we don’t want to get fined and prevented from trading, we have to follow
> FINRA regulations..

Sure.  Your system for this is correctly logging the failures *at the other 
end outside your administrative span of control*, correct?

That's Force Majeure, as far as I can see; you can't compare to a server
inaccessible through no fault of your own.

Find the NANOG messages, print them out, sign and date, put in your logbook.

If you're really worried, consult your inside counsel to see if there's anything
else you can do.  And surely FINRA itself has counsel for this, too?

Oh, and let's take this to -discuss.  :-)

Cheers,
-- jr '<admin/>' a
-- 
Jay R. Ashworth                  Baylink                       jra at baylink.com
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates       http://www.bcp38.info          2000 Land Rover DII
St Petersburg FL USA      BCP38: Ask For It By Name!           +1 727 647 1274