Loading Profile...
How does service provider know that a nonce was not used before?
1
person has this question
I have this question, too!
Tell me when someone answers.
The more people who ask this question, the more it gets noticed.
The more people who ask this question, the more it gets noticed.
-
Inappropriate?As the nonce is generated by customer, service provider could hardly know if it was used before. And timestamp is not very reliable also.
I think hacker could use repeat attack if his program is fast enough. -
Inappropriate?Not really... it's up to the service provider to store the nonces and timestamps. There's certainly a scaling requirement, but if you want to be secure, you'll have to do it.
Search the mailing list for more on this topic. -
Inappropriate?I've considered this solution. But that means server provider have to store lots of nonces.
EMPLOYEE
