RFC 7486: HTTP Origin-Bound Authentication (HOBA)

HTTP Origin-Bound Authentication (HOBA) is a digital-signature-based design for an HTTP authentication method. The design can also be used in JavaScript-based…

Read RFC 7486 on the RFC Editor

Outgoing relationships (16 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 5234: Augmented BNF for Syntax Specifications: ABNF
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 20: ASCII format for network interchange
Normative reference — RFC 7231: Hypertext Transfer Protocol (HTTP/1.1): Semantics and Content
Normative reference — RFC 3447: Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1
Normative reference — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Normative reference — RFC 6454: The Web Origin Concept
Normative reference — RFC 6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage
Normative reference — RFC 7235: Hypertext Transfer Protocol (HTTP/1.1): Authentication
Normative reference — RFC 5785: Defining Well-Known Uniform Resource Identifiers (URIs)
Informative reference — RFC 4086: Randomness Requirements for Security
Informative reference — RFC 6265: HTTP State Management Mechanism
Informative reference — RFC 6376: DomainKeys Identified Mail (DKIM) Signatures

Incoming relationships (4 related RFCs)

Informatively referenced by — RFC 7644: System for Cross-domain Identity Management: Protocol
Informatively referenced by — RFC 8322: Resource-Oriented Lightweight Information Exchange (ROLIE)
Informatively referenced by — RFC 8857: The WebSocket Protocol as a Transport for the Binary Floor Control Protocol (BFCP)
Informatively referenced by — RFC 9729: The Concealed HTTP Authentication Scheme