Skip to content

Commit

Permalink
Fix reflection SVG
Browse files Browse the repository at this point in the history
  • Loading branch information
tfpauly authored May 17, 2024
1 parent 2f66ebd commit 22625bb
Showing 1 changed file with 9 additions and 9 deletions.
18 changes: 9 additions & 9 deletions draft-ietf-privacypass-auth-scheme.md
Original file line number Diff line number Diff line change
Expand Up @@ -617,15 +617,15 @@ challenge is per-origin or not. For example, cross-origin tokens with empty
contexts can be reflected from one party by another, as shown below.

~~~ aasvg
+--------+ +----------+ +--------+
| Origin | | Attacker | | Client |
+---+----+ +----+-----+ +---+----+
| | |
+-- TokenChallenge -->| |
| +-- (reflect challenge) ->|
| |<-------- Token ---------+
|<-- (reflect token) -+ |
| |
+--------+ +----------+ +--------+
| Origin | | Attacker | | Client |
+---+----+ +----+-----+ +---+----+
| | |
+--- TokenChallenge -->| |
| +-- (reflect challenge) -->|
| |<-------- Token ----------+
|<-- (reflect token) --+ |
| | |
~~~
{: #fig-replay title="Replay attack example"}

Expand Down

0 comments on commit 22625bb

Please sign in to comment.