webauth:sec10.pdf
pdos.csail.mit.edu · 7,003 words · saved by 1 readers
N/A
Dos and Don’ts of Client Authentication on the Web Kevin Fu, Emil Sit, Kendra Smith, Nick Feamster fubob, sit, kendras, feamster @mit.edu MIT Laboratory for Computer Science http://cookies.lcs.mit.edu/ Abstract the client authentication of two systems, gained…
saved by
related reading
- passwords - Demystifying Web Authentication (Stateless Session Cookies) - Information Security Stack Exchangesecurity.stackexchange.com
- JWT should not be your default for sessionsevertpot.com
- 297.pdfeprint.iacr.org
- Why We Don’t Trust the Database With Authentication – Sturdy Statisticsblog.sturdystatistics.com
- 546.pdfeprint.iacr.org
- RFC 9700: Best Current Practice for OAuth 2.0 Securitydatatracker.ietf.org
- ProofsArgsAndZK.pdfpeople.cs.georgetown.edu
- sec22-pal.pdfusenix.org
- thesis.pdfaayushg.com
- Logging AI agents into web apps: From cookie hacks to proper OAuthworkos.com
- 293.pdfeprint.iacr.org
- 2010.pdfeprint.iacr.org