System Administration Guide: Security Services

Returning the Verifier to the Client

The server returns a verifier to the client, which includes the following:

The reason for subtracting 1 from the time stamp is to ensure that the time stamp is invalid. So, the time stamp cannot be reused as a client verifier.