You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently we don't check the messageTimestamp against the current server time when authorizing a message. We should do this to prevent blatant backdated "new" message to be accepted.
There will be times when a DWN needs to bringing in messages with an older time stamp, but those fall into the category of "synchronization", which in my mind has a different authorization context.
The text was updated successfully, but these errors were encountered:
Currently we don't check the
messageTimestamp
against the current server time when authorizing a message. We should do this to prevent blatant backdated "new" message to be accepted.There will be times when a DWN needs to bringing in messages with an older time stamp, but those fall into the category of "synchronization", which in my mind has a different authorization context.
The text was updated successfully, but these errors were encountered: