Oddbean new post about | logout
 When you have no argument you can always play "hostility" or similar card.

You're just a liar. I use to have GrapheneOS on my phone.
Users CANNOT use any other server than GrapheneOS to sync clock using WIFI or LAN.
Why are you lying?

You can read YOUR site.

"An HTTPS connection is made to https://time.grapheneos.org/generate_204 to update the time"

You have no option to choose other server.

Your lies only confirm that GrapheneOS is not reliable.
 
 Lets quote the WHOLE thing shall we:

° An HTTPS connection is made to https://time.grapheneos.org/generate_204 to update the time with a millisecond precision X-Time header. As part of future support for using other services, it falls back to the standard Date header with second precision.

This is a full replacement for Android's standard network time update implementation, which uses unauthentication SNTP (Simple Network Time Protocol) with fallback to the cellular network when it's not available (GNSS can also be used as a time source but is disabled by default, and OEMs can choose the priority order). Network time updates are security sensitive since certificate validation depends on having an accurate time, but the standard NTP / SNTP protocols used across most OSes have no authentication or encryption.

We plan to offer a toggle to use the standard functionality instead of HTTPS-based time updates in order to blend in with other devices.

Network time can be disabled with the toggle at Settings ➔ System ➔ Date & time ➔ Set time automatically. Unlike AOSP or the stock OS on the supported devices, GrapheneOS stops making network time connections when using network time is disabled rather than just not setting the clock based on it. The time zone is still obtained directly via the time zone provided by the mobile network (NITZ) when available which you can also disable by the "Set time zone automatically" toggle.


So as I said "Dependent on Connection" and as I said we DO NOT FORCE people to use our services. Not only can it be disabled, as I said "use either/or or NONE" we ARE going to offer the default connection.

You're a bad faith actor.  
 You changed your statement to "We are going to offer..." 
Currently you force to use your server. People need  accurate time -Tor, I2p, TOTP-2FA etc.

Before I thought that GOS is not reliable now I changed my point of view you're just probably a honeypot to fingerprint people.