On 2013-09-10, at 16:52, Russ Housley <housley@xxxxxxxxxxxx> wrote: > NTP can be used to get time from an IP address. I understand all of the reasons why a DNS name is preferred, but this a bootstrapping problem. Retrieval of root zone KSK trust anchors requires a DNS name, however (and you can't assume that the active KSK when the router left the factory is the same as the active KSK when the router was taken out of the box). Joe