Getting web authentication right A

by Joseph Bonneau

@MISC{Bonneau_gettingweb,
    author = {Joseph Bonneau},
    title = {Getting web authentication right A},
    year = {}
}

best-case protocol for the remaining life of passwords

67	Securing passwords against dictionary attacks - Pinkas, Sander - 2002
33	Dos and don’ts of client authentication on the web - Fu, Sit, et al. - 2001
23	Email-based Identification and Authentication: An Alternative to PKI - Garfinkel - 2003
11	The password thicket: technical and market failures in human authentication on the web - Bonneau, Preibusch - 2010
6	SPP: An anti-phishing single password protocol - Gouda, Liu, et al.
6	WSKE: Web server key enabled cookies - Masone, Baek, et al.
3	Sessionlock: Securing web sessions against eavesdropping - Adida - 2008
3	A secure cookie protocol - Liu, Kovacs, et al. - 2005
2	A Lightweight Approach to Authenticated Web Caching - Blundo, Cimato, et al. - 2005
2	Active cookies for browser authentication - Juels, Jakobsson, et al. - 2007
1	Hardened Stateless Session Cookies - Murdoch - 2008
1	Secure session management with cookies - Pujolle, Serhrouchni, et al. - 2009
1	pwdArmor: Protecting Conventional Password-Based Authentications - Horst - 2008