Signing the transmission isn't enough to prevent a replay attack.
It should be if each message includes an incrementing counter and the clients keep track of which counters they have already seen.
alt Hacker News
It should be if each message includes an incrementing counter and the clients keep track of which counters they have already seen.