-
Notifications
You must be signed in to change notification settings - Fork 41
Description
To authenticate customers, our VPN servers send a request to a central authentication server, containing the customers account ID. The authentication server holds a temporary record of all connected customer ID's. When a customer connects to a VPN gateway, the authentication server checks how many active authentication records are already in the table for the account ID, if it exceeds the allowed number of simultaneous connections, then authentication is denied. When a user disconnects, the relevant record is permanently deleted. If an adversary was able to gain access to this data, they could only determine which account ID's were logged into the VPN network at that exact moment in time.
Change ID's to IDs - "IDs" implies singular possessive, not a plural.
While it's a minor error that will likely stay unnoticed to most readers, it is still technically a grammar error.