Messages - Inconsistent statements about mitigating replay attacks

[Michael Jones]

"nonce" is defined as "A random, unique string value used to mitigate replay attacks." (3 times!)

But then later, the spec says "The Client SHOULD check the nonce value for replay attacks. Replay attack mitigation is out of scope for this specification." (2 times!)

Are we mitigating replay attacks or not?

[Michael Jones]

Delete the sentence: Replay attack mitigation is out of scope for this specification. Add "The precise method used for detecting replay attacks using the nonce is client specific."

[Michael Jones]

Fix #301 Messages - Inconsistent statements about mitigating replay attacks. Also corrected the fix to #386.

→ 513ba16ab467