Reputation: 417
A solution to prevent replay attacks in a web service request is to use timestamps which will be integrated in the request.
What's the best way to get a timestamp? Should this be from the client side or to make an initial request for a timestamp, integrate that timestamp to next request, then send the request to the server?
Upvotes: 1
Views: 2174
Reputation: 72
better to send the gmt time stamp so that it will be converted back to any other time zone at client side.
Upvotes: 1