@techreport{sayre-http-security-variance-00, number = {draft-sayre-http-security-variance-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/html/draft-sayre-http-security-variance-00}, author = {Robert Sayre}, title = {{Security Requirements for HTTP}}, pagetotal = 13, year = 2007, month = nov, day = 13, abstract = {Recent IESG practice dictates that IETF protocols must specify mandatory to implement security mechanisms, so that all conformant implementations share a common baseline. This document examines all widely deployed HTTP security technologies, and analyzes the trade- offs of each.}, }