Secondaries send a token (previously called a nonce) to the Primary to be bundled together with other tokens from other Secondaries and sent to the Timeserver to be signed in a package alongside the Timeserver's time and returned to the Primary and Secondaries.
That will be renamed from nonce to token, because the term "nonce" may be misleading as it is used here: While an individual nonce is employed for a single successful validation and then discarded, it may be sent by the Secondary multiple times before a successful timeserver attestation validation occurs.
Secondaries send a token (previously called a nonce) to the Primary to be bundled together with other tokens from other Secondaries and sent to the Timeserver to be signed in a package alongside the Timeserver's time and returned to the Primary and Secondaries.
That will be renamed from nonce to token, because the term "nonce" may be misleading as it is used here: While an individual nonce is employed for a single successful validation and then discarded, it may be sent by the Secondary multiple times before a successful timeserver attestation validation occurs.