Re: Digest Authentication: nc=

On Wed, 29 Apr 1998, Dave Kristol wrote:

> In my implementation of Digest, I don't verify that a given nonce count
> (nc=) has appeared only once.  My server simply doesn't retain that
> kind of state.
> 
> So I'm wondering, *is* anyone planning to implement checks on reuse
> of nc?

  Our internal nonce handling already has a nonce use count, so yes, I
expect that when I do this I'll be checking it.