-
Notifications
You must be signed in to change notification settings - Fork 9
nc count checking is too strict #2
Copy link
Copy link
Open
Description
Hi and thanks a bunch for this wonderful library.
I noticed that it checks that the nc (nonce count) given by client must be greater than previous value. This check is too strict and causes login window to pop up on client way too often. Instead, it should only check that the same nc number is not reused. Client cannot ensure that its requests arrive to the server in order so checking for ascending order is too strict.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels