Tag
revocation
- Oct 23, 2026 Refresh Token Rotation and Replay Detection How rotating refresh tokens limit the value of a stolen credential, why a used token presented twice means compromise, and how a grace window keeps honest clients from tripping the alarm. backend systems
- Jan 18, 2026 Name Matching and Revocation: What the Certificate Does Not Tell You Subject alternative names, wildcard coverage, and the two revocation mechanisms, including why a stapled response and a fetched response answer different questions. internet protocols
- May 30, 2024 Attenuation and Revocation of Delegated Authority How a capability can be narrowed before it is passed on, why revocation in a capability system is either impossible or requires indirection, and what each indirection costs. language runtimes
- May 23, 2024 Session Fixation, Rotation, and Revocation Why authenticating in place hands an attacker a valid session, how rotation must be sequenced to survive concurrent requests, and what revocation can and cannot reach. backend systems