>> This fact means that an attacker can determine the first correct character of the tag by submitting requests to a signed URL with a different first character in the tag each time, and stopping when the request takes a little longer than usual. After guessing the first character they can move onto the second, and so on until they’ve guessed the whole correct tag.
Wouldn't this attack be eliminated by using iptables rate limiting to reduce the attack window of opportunity?
Wouldn't this attack be eliminated by using iptables rate limiting to reduce the attack window of opportunity?