Confirmed users
358
edits
Services/Sync/KeyRecovery: Difference between revisions
→Server-Generated Tokens
| Line 144: | Line 144: | ||
Open Questions: | Open Questions: | ||
* | * Is it acceptable to leak detailed timestamp information in the token? Would it be better to sign based on "time chunks" by rounding down to e.g. the nearest 30 seconds? | ||
* Is there a standard for signed auth tokens like this? These are related:<br> | |||
http://tools.ietf.org/html/rfc4226<br> | |||
http://tools.ietf.org/html/rfc6238 | |||
=== User-Generated Tokens === | === User-Generated Tokens === | ||