> Denial of service attack then.The best solution is, I believe, to validate the request atread-time instead of open-time.