It is wise to be mindful of your legitimate users as you implement security measures. 所以在你实现安全措施的时候,留心合法用户的反馈是很明智的。
They can be replayed because a service cannot determine that the person sending the ticket is actually the ticket's legitimate owner. 因为服务不能确定票的发送者是不是合法用户。