My prototype does put a timestamp in the signature, ...
That will prevent replay of old signatures, but not of fresh ones.
Correct. That's not a bug. That's what it's designed to do.
So you want to get replay attacks based on freshly harvested signatures?
It is increasingly clear that whatever problem SES is purporting to
solve is unrelated to any problem that I can identify in the real world
so I'm out of here. Bye.
--
John R. Levine, IECC, POB 727, Trumansburg NY 14886 +1 607 330 5711
johnl(_at_)iecc(_dot_)com, Mayor, http://johnlevine.com,
Member, Provisional board, Coalition Against Unsolicited Commercial E-mail