I-D Action: draft-oiwa-httpbis-mutualauth-00.txt

internet-drafts@ietf.org Mon, 04 June 2012 14:07 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-oiwa-httpbis-mutualauth-00.txt
Message-ID: <20120604140732.15634.6142.idtracker@ietfa.amsl.com>
Date: Mon, 04 Jun 2012 07:07:33 -0700
Precedence: list
Reply-To: internet-drafts@ietf.org

A New Internet-Draft is available from the on-line Internet-Drafts directories.

	Title           : Mutual Authentication Protocol for HTTP
	Author(s)       : Yutaka Oiwa
                          Hajime Watanabe
                          Hiromitsu Takagi
                          Boku Kihara
                          Tatsuya Hayashi
                          Yuichi Ioku
	Filename        : draft-oiwa-httpbis-mutualauth-00.txt
	Pages           : 53
	Date            : 2012-06-04

   This document specifies a mutual authentication method for the Hyper-
   text Transport Protocol (HTTP).  This method provides a true mutual
   authentication between an HTTP client and an HTTP server using
   password-based authentication.  Unlike the Basic and Digest
   authentication methods, the Mutual authentication method specified in
   this document assures the user that the server truly knows the user's
   encrypted password.  This prevents common phishing attacks: a
   phishing attacker controlling a fake website cannot convince a user
   that he authenticated to the genuine website.  Furthermore, even when
   a user authenticates to an illegitimate server, the server cannot
   gain any information about the user's password.  The Mutual
   authentication method is designed as an extension to the HTTP
   protocol, and is intended to replace the existing authentication
   methods used in HTTP (the Basic method, Digest method, and
   authentication using HTML forms).


A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-oiwa-httpbis-mutualauth-00.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

This Internet-Draft can be retrieved at:
ftp://ftp.ietf.org/internet-drafts/draft-oiwa-httpbis-mutualauth-00.txt

The IETF datatracker page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-oiwa-httpbis-mutualauth/

I-D Action: draft-oiwa-httpbis-mutualauth-00.txt internet-drafts