@techreport{ietf-httpbis-security-properties-05, number = {draft-ietf-httpbis-security-properties-05}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-httpbis-security-properties/05/}, author = {Jeff Hodges and Barry Leiba}, title = {{Security Requirements for HTTP}}, pagetotal = 14, year = 2010, month = mar, day = 10, abstract = {Recent IESG practice dictates that IETF protocols must specify mandatory-to-implement (MTI) security mechanisms, so that all conformant implementations share a common baseline. This document examines all widely deployed HTTP security technologies, and analyzes the trade-offs of each.}, }