SPIFFE identity tokens for AI agents can still be replayed if intercepted. The IETF WIMSE group built the fix, and SPIFFE just adopted it.
Source: [HackerNoon](https://hackernoon.com/why-spiffe-agent-identities-can-still-be-replayed-and-how-wimse-fixes-it?source=rss)