3 ms·
Make them extremely time limited like an OTP token? Require a token to be provided by the requester that is used to sign the response token so its limited to a
by dbetteridge 1y ago
Make them extremely time limited like an OTP token?
Require a token to be provided by the requester that is used to sign the response token so its limited to a single use
- Tadpole9181 1y agoTokens need to be single use or you create a new side channel already. Time limiting is also a challenge without creating a side channel, though possible with a similar mechanism to 2FA.