Review and changes from Jocelyn Fiat

To answer your question:
In the list, all nonces are stored. The last one is the current one.
It is possible that a nonce is in the list, but is not the latest one.
Then, it is possible that the "stale" flag can be set, which means that the user agent doesn't have to prompt the user for the credentials again.