Re: [Ace] Overwriting Tokens

2018-12-12 Thread Jim Schaad
> -Original Message- > From: Ace On Behalf Of Stefanie Gerdes > Sent: Wednesday, December 12, 2018 2:17 AM > To: ace@ietf.org > Subject: Re: [Ace] Overwriting Tokens > > Hi Ludwig, > > On 12/12/2018 11:05 AM, Ludwig Seitz wrote: > > On 12/12/2018 10:3

Re: [Ace] Overwriting Tokens

2018-12-12 Thread Stefanie Gerdes
Hi Ludwig, On 12/12/2018 11:05 AM, Ludwig Seitz wrote: > On 12/12/2018 10:33, Stefanie Gerdes wrote: >> Hi again, >> >> I have one additional comment to ace-oauth-17: >> >> Section 5.8.1 recommends that RS stores only one token per key and that >> existing tokens are overwritten by new tokens. I

Re: [Ace] Overwriting Tokens

2018-12-12 Thread Ludwig Seitz
On 12/12/2018 10:33, Stefanie Gerdes wrote: Hi again, I have one additional comment to ace-oauth-17: Section 5.8.1 recommends that RS stores only one token per key and that existing tokens are overwritten by new tokens. I wonder how the RS knows which token is the most recent. I don't think

[Ace] Overwriting Tokens

2018-12-12 Thread Stefanie Gerdes
Hi again, I have one additional comment to ace-oauth-17: Section 5.8.1 recommends that RS stores only one token per key and that existing tokens are overwritten by new tokens. I wonder how the RS knows which token is the most recent. I don't think the expiration time helps in this case because