I have this scenario:
- Webserver domain A. Generates sensitive information when a request from a browser is received but this information is not disclosed to the browser.
- Webserver domain B. Processes the information generated by webserver A on receiving a petition from the very same browser which contacted webserver A.
Communication between the browser and webservers is secured (https). Webservers can communicate directly and securely with each other
How could I implement this scheme in a simple and secure way?