How is this relevant today?
Note: ntpsec is apparently still alive here: https://gitlab.com/NTPsec/ntpsec
Because their approach to hardening - simplifying, and removing code - is timeless.
I posted the article for that, not because I thought that five year old NTPsec news is particularly relevant :)
I agree simplifying and removing code is timeless.
I think it’s pretty hard to argue against that… (No?)
I’ve not seen it argued against, but I have seen it passed over or ignored as a viable strategy.