7.7 PREVENTING SERVER REPLAY
EXERCISE 7.7: PREVENTING SERVER REPLAY
The transmissions to the client from our AS and TGS do not include a timestamp. With no timestamp and no nonce, they can be completely replayed. Add timestamps into the user data structures transmitted by both servers and modify the client code to check them.