News for hackers. Stuff that matters.

A comment on Access for Infrastructure: SSH. Parent comment

Re:Access for Infrastructure: SSH by g-b-r on Wednesday October 23, 2024 @09:01PM (#41930862)
“All JWTs are sent with low expirations (5 seconds) to limit replability”

Do you know how many times a few packets can be replayed in 5 seconds?

[ Parent | on HN ]
Re:Access for Infrastructure: SSH by candiddevmike on Wednesday October 23, 2024 @09:43PM (#41931098)
Sure, but this is all happening over HTTPS (Etcha only listens on HTTPS), it's just an added form of protection/expiration.
[ Parent | on HN ]