Clarified when PSK-consumer prompts the user for the PSK input

index.bs

@@ -480,20 +480,22 @@ SPAKE2 describes in detail how auth-spake2-message and auth-spake2-confirmation
 are computed.
 
 If the PSK-presenter wants to perform authentication, the PSK-presenter
-starts authentication process by presenting the PSK to the user and sending
-auth-spake2-message message.
+starts the authentication process by presenting the PSK to the user and sending
+a auth-spake2-message message. When the PSK-consumer receives
+the auth-spake2-message message, the PSK-consumer prompts the user for the PSK
+input if it has not done so yet.
 
 If the PSK-consumer wants to perform authentication, the PSK-consumer
 sends auth-spake2-need-psk message to the PSK-presenter to start authentication
-process.  After the user inputs the PSK into the PSK-consumer,
-the PSK-consumer computes and sends auth-spake2-message.
+process and prompts the user to input the PSK. If the PSK-presenter receives
+a auth-spake2-need-psk message after starting authentication from their side,
+the PSK-presenter ignores the auth-spake2-need-psk message.
 
-If the PSK-presenter receives a auth-spake2-need-psk message after starting
-authentication from their side, the PSK-presenter ignores
-the auth-spake2-need-psk message.
+After the user inputs the PSK into the PSK-consumer, the PSK-consumer computes
+and sends auth-spake2-message.
 
-When either agent knows PSK and has received a auth-spake2-message message,
-the agent computes and sends a auth-spake2-confirmation message.
+When either agent both knows the PSK and has received a auth-spake2-message
+message, the agent computes and sends a auth-spake2-confirmation message.
 
 When either agent has received both auth-spake2-message and
 auth-spake2-confirmation messages, the agent validates the confirmation message

index.html

@@ -1214,7 +1214,7 @@
 </style>
   <meta content="Bikeshed version ee4d7efc3ed6155392d49e10a542e2351fd5792d" name="generator">
   <link href="https://webscreens.github.io/openscreenprotocol/" rel="canonical">
-  <meta content="9b0875172f7758f0d5742b7add7cabf0c5d7f72f" name="document-revision">
+  <meta content="06a44820a4b3e1acb861b3aaf0c2cb135dc157f3" name="document-revision">
 <style>
 .highlight .hll { background-color: #ffffcc }
 .highlight .c { color: #999988; font-style: italic } /* Comment */
@@ -1935,17 +1935,19 @@ <h2 class="heading settled" data-level="6" id="authentication"><span class="secn
 SPAKE2 describes in detail how auth-spake2-message and auth-spake2-confirmation
 are computed.</p>
    <p>If the PSK-presenter wants to perform authentication, the PSK-presenter
-starts authentication process by presenting the PSK to the user and sending
-auth-spake2-message message.</p>
+starts the authentication process by presenting the PSK to the user and sending
+a auth-spake2-message message. When the PSK-consumer receives
+the auth-spake2-message message, the PSK-consumer prompts the user for the PSK
+input if it has not done so yet.</p>
    <p>If the PSK-consumer wants to perform authentication, the PSK-consumer
 sends auth-spake2-need-psk message to the PSK-presenter to start authentication
-process.  After the user inputs the PSK into the PSK-consumer,
-the PSK-consumer computes and sends auth-spake2-message.</p>
-   <p>If the PSK-presenter receives a auth-spake2-need-psk message after starting
-authentication from their side, the PSK-presenter ignores
-the auth-spake2-need-psk message.</p>
-   <p>When either agent knows PSK and has received a auth-spake2-message message,
-the agent computes and sends a auth-spake2-confirmation message.</p>
+process and prompts the user to input the PSK. If the PSK-presenter receives
+a auth-spake2-need-psk message after starting authentication from their side,
+the PSK-presenter ignores the auth-spake2-need-psk message.</p>
+   <p>After the user inputs the PSK into the PSK-consumer, the PSK-consumer computes
+and sends auth-spake2-message.</p>
+   <p>When either agent both knows the PSK and has received a auth-spake2-message
+message, the agent computes and sends a auth-spake2-confirmation message.</p>
    <p>When either agent has received both auth-spake2-message and
 auth-spake2-confirmation messages, the agent validates the confirmation message
 and sends the auth-status authenticated message.</p>