Re: Digest Authentication: nc=

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: Daniel Hellerstein: "On te, and on case in the digest example."
• Previous message: Dave Kristol: "Digest Authentication: nc="
• In reply to: Dave Kristol: "Digest Authentication: nc="

On Wed, 29 Apr 1998, Dave Kristol wrote:

> In my implementation of Digest, I don't verify that a given nonce count
> (nc=) has appeared only once.  My server simply doesn't retain that
> kind of state.
> 
> So I'm wondering, *is* anyone planning to implement checks on reuse
> of nc?

  Our internal nonce handling already has a nonce use count, so yes, I
expect that when I do this I'll be checking it.

• Next message: Daniel Hellerstein: "On te, and on case in the digest example."
• Previous message: Dave Kristol: "Digest Authentication: nc="
• In reply to: Dave Kristol: "Digest Authentication: nc="