Subject: [TLS] WebAuth - Replacement for HTTPS Client Certificate Authentication

From: Anders Rundgren <[email-masked]>
Date: Fri, 25 Oct 2013 11:42:25 +0200

Maybe of interest:

http://webpki.org/papers/PKI/webauth.pdf

Comments are welcome!

There are 3 independent possible standards targets in this proposal:

1. Browser bindings for JSON protocol invocations

2. JSON Clear-text Signature:
https://openkeystore.googlecode.com/svn/resources/trunk/docs/JSON-Clear-Text-Signature-Scheme.pdf

3. And then WebAuth itself

Cheers
Anders