Why Ubuntu does not use authenticated NTP by default? Unauthenticated NTP is dangerous, for example, a MITM can forge the NTP reply, switch the date back and use old/revoked SSL certificates.