Ostiary prevents replay by salting. Client's reply is only valid for the unique salt that the server has generated and only for a short time and obviously only once.
A replay attack can only make the server do whatever the legit client intended it to do, just up to [timeout] seconds later.
A replay attack can only make the server do whatever the legit client intended it to do, just up to [timeout] seconds later.