dss-x — archive

[Stefan Hagen]

Hi Andreas, On 21/03/17 13:15, Andreas Kuehne wrote: > Hi experts, > > > I just came across the nonce element in the RFC 3161 : > > "The nonce [...] allows the client to verify the timeliness of the > response when no local clock is available. [...] the same nonce value > MUST be included in the response " > > We do mention the nonce in the core document but only in terms of > verification processing. I can't find a way to include a nonce value in > a request. Did we just forget to mention the optional input 'Nonce'? If > yes, it would be a good moment to add it into the refurbished core ;-) the latter and yes the suggested remediation also :-) Thank you! Best, Stefan