3 ms·
You would want to use a token and the string and only accept the token to look up the string that you would only accept once and for a limited time. Otherwise
by MrStonedOne 7y ago
You would want to use a token and the string and only accept the token to look up the string that you would only accept once and for a limited time.
Otherwise its vulnerable to replay attacks
- ifdefdebug 7y agoYes I think I was cashing the generated string server side for a while and checking if the string I received back had a matching entry in the cache, otherwise reject it. Anyway, it's been a long time ago, and if I had to do it again today, i would rather not roll my own.