2 ms·
That's a HMAC password protocol, it's different. In the case of tickets, the one signing is "this server then" and the one checking is "this server now", with
by JulianMorrison 18y ago
That's a HMAC password protocol, it's different.
In the case of tickets, the one signing is "this server then" and the one checking is "this server now", with a period of amnesia (about the data, not about the password) in between.
- run4yourlives 18y agoAhh, my bad. I think I see where you're going with this now. You're basically just remembering the last visit a particular client makes on every request, and then resetting the ticket for the next request correct?
- JulianMorrison 18y agoImagine a disposable photo-ID ticket marked "admit one authenticated client". The bouncer takes it, looks at it, looks at you, tears it in half, and lets you in. You get to make a request, and as you carry the response out of the exit door, a member of staff takes your photo and prints a fresh ticket.