search

tuupola / branca-spec

Authenticated and encrypted API tokens using modern crypto
https://www.branca.io/
219 stars 7 forks source link

Is timestamp a security risk? #1

Closed tuupola closed 6 years ago

tuupola commented 6 years ago

Is timestamp a security risk? Ie. should there be another version without timestamp in header?Currently it is possible to opt out by passing a 0 or false as timestamp. This still wastes a few bytes per request.

Current feeling is making another version just to save 4 bytes is not worth the hassle.