7 ms·
I thought I was misreading this. It seems onerous to keep track of every nonce, even scoped to a given session. Maybe I’m missing something.
by tfigueroa 3y ago
I thought I was misreading this. It seems onerous to keep track of every nonce, even scoped to a given session. Maybe I’m missing something.
- kortex 3y agoA Bloom or cuckoo filter would allow for efficient tracking of nonces (depending if the security model prefers false positives with 4xx/resend, or false negatives)
- cryptonym 3y agoStill not ideal in a distributed environment, a request may have to synchronously go around the world to hit that nonce db.