HTTP Origin-Bound Authentication (HOBA)

Metadata

Publisher: IETF
Doc Type: Experimental
Pages: 28
Abstract: HTTP Origin-Bound Authentication (HOBA) is a digital-signature-based design for an HTTP authentication method. The design can also be used in JavaScript-based authentication embedded in HTML. HOBA is an alternative to HTTP authentication schemes that require passwords and therefore avoids all problems related to passwords, such as leakage of server-side password databases.
Publication Date: 2015-03-01
Status Note: Experimental
DOI: 10.17487/RFC7486
Link: https://doi.org/10.17487/RFC7486
Author(s): Stephen Farrell
Paul E. Hoffman
Michael Thomas
Keyword(s): HTTP Authentication, Origin-bound Key

Latest version of IETF RFC 7486

Document Versions — IETF RFC 7486

▶ IETF RFC 7486 (2015-03-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

NIST FIPS 180-4 [Active]
IETF RFC 20 [Active*]
IETF RFC 2119 [Active*]
IETF RFC 3447 [Superseded*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 4648 [Active*]
IETF RFC 5234 [Active, Amended*]
IETF RFC 5246 [Superseded*]
IETF RFC 5785 [Superseded*]
IETF RFC 6454 [Active*]
IETF RFC 6698 [Active*]
IETF RFC 6750 [Active*]
IETF RFC 7231 [Superseded*]
IETF RFC 7235 [Superseded*]

Bibliographic Reference(s)

Sophos, "Security Threat Report 2013", January 2013, < http://www.sophos.com/en-us/medialibrary/pdfs/other/ sophossecuritythreatreport2013.pdf >. EXTERNAL
Mitchell, C. and A. Thomas, "Standardising authentication protocols based on public key techniques", Journal of Computer Security Volume 2, 23-36, 1993. EXTERNAL
Bonneau, J., "The Science of Guessing: Analyzing an Anonymized Corpus of 70 Million Passwords", IEEE Symposium on Security and Privacy 538-552, 2012. EXTERNAL
IETF RFC 4086 [Active*]
IETF RFC 6265 [Active*]
IETF RFC 6376 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7486.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7486, HTTP Origin-Bound Authentication (HOBA). Available at https://doi.org/10.17487/RFC7486

Snippet:

IETF RFC 7486, HTTP Origin-Bound Authentication (HOBA). Available at https://doi.org/10.17487/RFC7486

HTML (ISO 690 compliant)

Preview:

IETF RFC 7486, HTTP Origin-Bound Authentication (HOBA). Available at https://doi.org/10.17487/RFC7486

Snippet:

<span class="citation"><cite>IETF RFC 7486</cite>, HTTP Origin-Bound Authentication (HOBA). Available at <a href="https://doi.org/10.17487/RFC7486" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7486</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7486, HTTP Origin-Bound Authentication (HOBA)
doi: 10.17487/RFC7486
url: https://doi.org/10.17487/RFC7486

Snippet:

<li>
<cite id="bib-rfc7486">IETF RFC 7486</cite>, HTTP Origin-Bound Authentication (HOBA)
<span class="doi">10.17487/RFC7486</span>
</li>

Referenced By

IETF RFC 7644 [Active*]
IETF RFC 8322 [Active*]