X-RT-Original-Encoding: utf-8 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Disposition: inline X-RT-Interface: Web Message-ID: Content-Transfer-Encoding: binary X-Mailer: MIME-tools 5.508 (Entity 5.508) In-Reply-To: References: <20180108182629.GA16112@jurassic> <20180118035440.GA29430@jurassic> RT-Send-CC: Content-Length: 355 On Thu Jan 18 03:54:57 2018, muks wrote: > Would you be fine with incrementing the nonce on every subsequent query? => a nonce must be not predictable so I am afraid it is not fine (note I said not predictable vs random as it is the wanted property and to take the nonce content from a random generator is only the common way to guarantee the property).