Hi Jim,

Jim Schaad <i...@augustcellars.com> writes:

> define a new claim which says - This token supersedes the token(s)
> with CWTID values of "x", "y" and "z".

Isn't this the same as token revocation with all its implications?  I
would prefer strict token ordering combined with a sound revocation
mechanism. In both scenarios, you would still have the issue that the
client forwards the superseding token/revocation message if it has a
benefit from doing so.

Grüße
Olaf

_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace

Reply via email to