Time source and accuracy

A timestamp is only as trustworthy as the clock behind it. CNX's TSA servers derive their time from the same physical reference chain as CNX Precision Time: GNSS receivers discipline a set of Rubidium atomic oscillators, which distribute time to CNX's infrastructure over NTS (Network Time Security, RFC 8915) rather than plain NTP. The TSA servers that sign tokens sit at the end of that chain, alongside — not downstream of — the servers CNX's own internal logging uses.

That shared reference is what lets a subscriber correlate a TSA token against their own NTS- or PTP-synchronized infrastructure: both ultimately trace to the same oscillators, not to two independently-drifting clocks. The accuracy bound this chain provides, and its alignment with ANSI ASC X9.95, are defined in the Timestamp Policy — that's the authoritative source for the exact numeric commitment, since it's the document CNX amends under notice if the bound ever changes.