Update draft-ietf-oauth-attestation-based-client-auth.md

Co-authored-by: Christian Bormann <8774236+c2bo@users.noreply.github.com>

Author: paulbastian

draft-ietf-oauth-attestation-based-client-auth.md

@@ -496,7 +496,7 @@ This specification does not provide a mechanism to rotate the Client Instance Ke
 
 ## Replay Attack Detection {#implementation-consideration-replay}
 
-Authorization Servers implementing measures to detect replay attacks as described in [](#security-consideration-replay) require efficient data structures to manage large amounts of challenges for use cases with high volumes of transactions. To limit the size of the data structure, the Authorization Server should use a sliding window, allowing Client Attestation PoPs within a certain time window, in which the seen `challenge` or `jti` values are stored, but discard them afterwards. To ensure security, Client Attestation PoPs outside this time window MUST be rejected by the Authorization Server. The allowed window is determined by the `iat` of the Client Attestation PoP and the sliding window time duration chosen by the Authorization Server. These data structures need to:
+Authorization Servers implementing measures to detect replay attacks as described in [](#security-consideration-replay) require efficient data structures to manage large amounts of challenges for use cases with high volumes of transactions. To limit the size of the data structure, the Authorization Server should use a sliding window, allowing Client Attestation PoPs within a certain time window, in which the seen `challenge` or `jti` values are stored, but discarded afterwards. To ensure security, Client Attestation PoPs outside this time window MUST be rejected by the Authorization Server. The allowed window is determined by the `iat` of the Client Attestation PoP and the sliding window time duration chosen by the Authorization Server. These data structures need to:
 
 - search the data structure to validate whether a challenge form a Client Attestation PoP has been previously seen
 - insert the new challenges from the Client Attestation PoP if the search returned no result