Skip to main content

Proof-based Authentication for HTTP Messages
draft-sporny-http-proofs-01

Document Type Expired Internet-Draft (individual)
Expired & archived
Author Manu Sporny
Last updated 2015-12-29 (Latest revision 2015-06-27)
RFC stream (None)
Intended RFC status (None)
Formats
Stream Stream state (No stream defined)
Consensus boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:

Abstract

For a client to access a particular resource on the Web, a server must expend a certain amount of computational effort to respond to the request. In some cases this computational effort is sizeable and the server may want to only respond to certain clients. For example, in a distributed denial-of-service attack, a server may require all clients to expend a certain amount of resources via a client-run proof-of-work algorithm to throttle the number of incoming requests to a more manageable number. This document details a new authentication scheme for HTTP that may be used to request and transmit proofs in HTTP headers.

Authors

Manu Sporny

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)