--- a/Overview.html Wed Jul 03 14:45:54 2013 -0400
+++ b/Overview.html Mon Jul 08 15:18:28 2013 -0400
@@ -409,7 +409,7 @@
1. Assume a combined assertion and certificate structure in JWT format for use with postMessage()
var assertionPlusCert is a JWT like above
- 2. Extract karen@webcrypto.com private key for signing assertion
+ 2. Obtain the karen@webcrypto.com private key for signing assertion from client-side storage
3. Send the certificate structure assertionPlusCert over for verification
Caveat emptor: step 3 can be made more efficient in terms of Web Crypto API usage if
@@ -470,7 +470,7 @@
Import the JWK key from Persona.org -- see Example 6
2. Verify the part signed by Persona.org
3. Assume utility functions to parse the event.data into subcomponents
- 4. Extract Karen's public key from event.data using utility function
+ 4. Obtain Karen's public key from event.data using utility function
5. Import Karen's public key for use within PSS
6. Verify the assertion signed by Karen's private key
7. Step 2. and 6. succeeding allow authentication to occur