Nonce and replay attacks

Hi,

I setup ‘nonce’ for a page on my website and I think it’s working, but I wanted to try to get more clarification.

What i’m looking for is the ‘Redis replay protection’.

It appears that after a ‘nonce’ is used, it is stored in the ‘Redis’ for 3 days to disallow nonce from being used again.

How does this work?

What is Redis? Do I need to do anything with cloudflare to use Redis?

What happens if there are 100,000 nonce’s used and there happens to be a few random that were created the same? Will that fail the “Redis” checks?

How can I see what data my website has in the Redis?

What exactly is determining that nonce can only be used once? Client or server?

How do I “Validate the nonce”. Does Cloudflare do that?

Thank you for any help!!

This topic was automatically closed after 15 days. New replies are no longer allowed.