[Openid-specs-fapi] Issue #603: Require servers to allow for clock skew (openid/fapi)

[josephheenan]

New issue 603: Require servers to allow for clock skew
https://bitbucket.org/openid/fapi/issues/603/require-servers-to-allow-for-clock-skew

Joseph Heenan:

As per the suggestion from Filip here:

[https://gitlab.com/openid/conformance-suite/-/issues/1038#note\_1424925163](https://gitlab.com/openid/conformance-suite/-/issues/1038#note_1424925163)

It is proposed that FAPI2 should require servers to allow for some small amount of clock skew, as that is good for general interoperability and the dpop spec allows server to do this but doesn’t require them to. \(And it’s preferable that we don’t add conformance tests that require clock skew to be allowed unless there’s a normative requirement in the specification requiring it.\)