3 ms·
I wonder why the subkeys are valid for 1d and not something much shorter like 15 minutes. IIUC if the frontend IAM servers of a service get compromised you can
by nielsole 5y ago
I wonder why the subkeys are valid for 1d and not something much shorter like 15 minutes. IIUC if the frontend IAM servers of a service get compromised you can only accept traffic for that service again on the next day, when a new subkey is valid.
I also wonder whether those subkeys are copied over to the frontend server (that might be a lot of data to copy) every day or requested and cached (possibly high latency for first call)
- gjs278 5y ago>IIUC never use this again. we already have IIRC and “I think” for fucks sake just stick with those
- killingtime74 5y agoMaybe they have infrastructure to deal with these situations?
- Corrado 5y agoI took it as a way to handle clock skew. Like many others, I've had lots of problems with clients having a clock that is pretty inaccurate. Though I think I agree with you that I don't think I've ever had a client with a skew of 1d.
- nielsole 5y agoYou could choose a grace period independently. Downside is that you have to keep all currently accepted keys around so there is a limit somewhere on storage costs.