Blog posts tagged with 'replay-attack':
OAuth timestamps and nonces
Date: 16 Dec 2010Tags: [ nonces ] [ oauth ] [ replay-attack ] [ timestamps ]
Oauth is a very popular authentication mechanism used for a lot of web applications. And not without good reasons. It is relatively easy to implement, has different flavours (2-legged, 3-legged system) so you can use almost anywhere that requires authentication and authorization. This post is not about how to implement oauth. That can be found in much greater detail than I can explain here, but about two tiny details that can make or break your oauth security: the oauth nonce and timestamp.