diff --git a/index.html b/index.html index 2dd456643..b322ceb4d 100644 --- a/index.html +++ b/index.html @@ -6009,12 +6009,23 @@

Replay Attack

A [=verifier=] might wish to ensure that a [=verifiable presentation=] is not used more than a certain number of times. For example, a [=verifiable -credential=] representing an event ticket, might allow entry to multiple +credential=] representing an event ticket might allow entry to multiple individuals if presented multiple times, undermining the purpose of the ticket -from the perspective of its issuer. To prevent against such attacks, -[=holders=] can make use of techniques such as including a -nonce during -presentation, or adding an expiry timestamp to reduce the window of attack. +from the perspective of its [=issuer=]. To prevent such replay attacks, +[=verifiers=] require [=holders=] to include additional security measures +in their [=verifiable presentations=]. Examples include the following: +

Spoofing Attack