WebAuth - Replacement for HTTPS Client Certificate Authentication

Maybe of interest:

http://webpki.org/papers/PKI/webauth.pdf

Comments are welcome!

There are actually 3 independent standards targets in this proposal:

1. Browser bindings for JSON protocol invocations

2. JSON Clear-text Signature:
https://openkeystore.googlecode.com/svn/resources/trunk/docs/JSON-Clear-Text-Signature-Scheme.pdf

3. And then WebAuth itself

Cheers
Anders

Received on Wednesday, 23 October 2013 14:55:57 UTC