On: The Copenhagen Book: general guideline on implemen...

[baq]

He’s right, though. I understand the risk of this session never expiring is the same as No sane person should ever request a token which never expires. Your fat tail of risk dominates the whole distribution of outcomes.