title: need help understanding nonce
body: <p>I have a question about <a href="http://en.wikipedia.org/wiki/Cryptographic_nonce" rel="noreferrer">nonce</a>. I understand it's to prevent replay attacks but what happens if the hacker somehow got the nonce and uses it before the user does? </p>