Comment: Re:Do not want ... (Score 1) 114
- Conversation between Alice and Cats.com
- Alice: Hello Cats.com, I would like to login as alice@gmail
- Cats.com: Please, provide me proof with nonce 98765
- Conversation between Alice and Gmail
- Alice: Hi Gmail, can you verify that I own alice@gmail with nonce 98765
- Gmail: Certainly, Just login
- Alice: OK, here's my password
- Gmail: Here's a signed assertion that alice@gmail logged in and provided the nonce 98765
- Conversation between Alice and Cats.com
- Alice: Hi Cats.com, here's Gmail's signed assertion that I logged in and provided nonce 98765
- Cats.com: Thanks Alice. Now I know that you are the owner of alice@gmail account
Of course the browser is doing most of the work for Alice and the browser can and might be storing all of her details and perhaps Alice asked the browser to keep these details for her convenience.