Some systems (for example cheap boards with no real time clock or servers with an empty CMOS battery) have little idea of time on startup and try to set actual time using NTP. If that also involves DNSSEC validated DNS requests, we have a bootstrap problem, since validating DNSSEC answers requires a valid idea of time. This talk discusses they way OpenBSD's NTP daemon solves this problem, providing a trustworthy time from startup.