First page Back Continue Last page Overview Text

Notes:


All interactions with AS are over https, providing privacy, protection of the user's password, and identification of AS
Interaction with WS can be over https: (in which case good things happen) but doesn't have to be (in which case the bad things that might happen only happen to this particular WS).