We perform a comprehensive analysis and comparison of 14 web single sign-on (SSO)
systems proposed and/or deployed over the past decade, including federated identity and …

In this paper we consider TLS Man-In-The-Middle (MITM) attacks in the context of web
applications, where the attacker is able to successfully impersonate the legitimate server to …

BrowserID is a complex, real-world Single Sign-On (SSO) System for web applications
recently developed by Mozilla. It employs new HTML5 features (such as web messaging …

The advent of end-to-end encrypted (E2EE) messaging and backup services has brought
new challenges for usable authentication. Compared to regular web services, the nature of …

Single sign-on (SSO) systems, such as OpenID and OAuth, allow Web sites to delegate user
authentication to third parties, such as Facebook or Google. These systems provide a …

Client authentication on the web has remained in the internet-equivalent of the stone ages
for the last two decades. Instead of adopting modern public-key-based authentication …

Modern applications integrate third-party services for easier development, additional
functionality (eg, connecting with social network identities), and extra revenue (eg …

Web applications have become one of the most common ways of providing access to online
information and services. People use their desktop or mobile browsers to surf the web and …