"Replay detected of message" causes

[Cantor, Scott]

On 4/19/17, 8:29 PM, "users on behalf of Nate Klingenstein" <users-bounces at shibboleth.net on behalf of ndk at sudonym.me> wrote:

> I have no idea what these people are doing or not doing, but I think
> this is totally plausible on a network with high latency, intermittent
> availability, mystery clients, and browsers that remember URLs.  It's
> sporadic, as mentioned, so I'll press the affected users for more
> details on exactly when they're experiencing this.

Clicking on stored URLs would be plausible and if it didn't involve latency issues, that probably would be fixable without the checks.

But since the stored URL would involve the IdP, and not any host that anybody would actually want to visit, I can't imagine why somebody would happen into doing it. i.e. The URL you start typing is wiki.shibboleth.net, not the IdP it sent you to.

-- Scott