%% You should probably cite rfc7486 instead of this I-D. @techreport{ietf-httpauth-hoba-09, number = {draft-ietf-httpauth-hoba-09}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-httpauth-hoba/09/}, author = {Stephen Farrell and Paul E. Hoffman and Michael Thomas}, title = {{HTTP Origin-Bound Authentication (HOBA)}}, pagetotal = 26, year = 2014, month = dec, day = 30, abstract = {HTTP Origin-Bound Authentication (HOBA) is a digital signature based design for an HTTP authentication method. The design can also be used in Javascript-based authentication embedded in HTML. HOBA is an alternative to HTTP authentication schemes that require passwords and therefore avoids all problems related to passwords, such as leakage of server-side password databases.}, }