11 Clock Skew +5min

Time to first impact

T+0 to 2s. first impact at 1s.

What was injected

Clock Skew +5min — nothing was injected: this is the worked example

What happened

every token rejected as expired while the clock was skewed

Impact

Remediation

• Allow for clock skew in token validation and schedule by a monotonic clock, not wall time.