If you are curious, it works basically like But the architecture now is much simpler so it has less bugs and fails much less often. I've been using it for months now without any hiccups. And now it has this external identity concept, which makes it possible for the user to not store their secret key (although they probably should) and recover it later by talking to the signers (operators), which was impossible before. It's also easier to ask the operators to forget about you and do all the things that require authenticating yourself.