In response to high-profile attacks that exploit hash function collisions, software vendors
have started to phase out the use of MD5 and SHA-1 in third-party digital signature …

We perform a comprehensive analysis and comparison of 14 web single sign-on (SSO)
systems proposed and/or deployed over the past decade, including federated identity and …

Forced by regulations and industry demand, banks worldwide are working to open their
customers' online banking accounts to third-party services via web-based APIs. By using …

We describe a novel user tracking technique that is based on assigning statistically unique
DNS records per user. This new tracking technique is unique in being able to distinguish …

In recent years, user-centric digital identity wallets have become increasingly available,
aiming to give individuals direct control over their personal data. The EU proposal in the …

Recent data protection regulations (such as GDPR and CCPA) grant consumers various
rights, including the right to access, modify or delete any personal information collected …

Cookies provide a state management mechanism for the web and are often used for
authentication, storing a user's session ID, and replacing their credentials in subsequent …

Non-transferability (NT) is a security notion which ensures that credentials are only used by
their intended owners. Despite its importance, it has not been formally treated in the context …

Password-based authentication faces various security and usability issues. Password
managers help alleviate some of these issues by enabling users to manage their passwords …

sa case study in cryptographic binding, we present a formal-methods analysis of the Fast
IDentity Online (FIDO) Universal Authentication Framework (UAF) authentication protocol's …