3 ms·
> Revocation is needed because you want to disable access to an intruder in the very second you detect I get that this has conceptual appeal, but I doubt this
by stickfigure 2y ago
> Revocation is needed because you want to disable access to an intruder in the very second you detect
I get that this has conceptual appeal, but I doubt this makes any difference in real life. Unless you have some very sophisticated infrastructure, it takes many minutes to discover the issue and then many more minutes even to decide what to do about it. A few extra minutes to cut off access is probably not going to make a big difference one way or another.
- nine_k 2y agoAn intruder might be not a sophisticated black hat hacker. It could be somebody who picked up an unlocked phone or keyboard. When I had a chance to design a token-based authn/authz system, we had two types of tokens, general access (with hours of expiration, mostly read-only access) and privileged access, with expiration time set to a minute or so. All auto-refreshed on use, all separately revokable.
- stickfigure 2y agoSure, but isn't it still going to take you N minutes/hours/days to discover the violation? Does it make a material difference that you can revoke access this hot second as opposed to up-to-5-minutes when the token expires? Seems to me that for most applications, the irrevocable 5-minute token seems "good enough".