3 ms·
Nitpick: a nonce is supposed to be used only once (safe against replay). I think you both mean the URL is supposed to be secret. I agree that there are many w
by jongraehl 18y ago
Nitpick: a nonce is supposed to be used only once (safe against replay). I think you both mean the URL is supposed to be secret. I agree that there are many ways (e.g. web proxies) for a URL to become not-secret.
- tptacek 18y agoI'm corrupting the term "nonce" regularly, but OK, I'll stick with "token". I think "URL" leaves the mistaken impression that there is some way to pull a Google doc out of thin air; something else has to have gone wrong for these problems to impact you.