> Gavin can trivially make up the transcript of the protocol, so Gavin can't use it to prematurely convince anyone of anything.

To clarify how this works: Bob generates a random b, then calculates (g^p)^b, and claims it was sent to Bob by Alice.