adambarth.com

en.wikipedia.org

HTTP Strict Transport Security - Wikipedia, the free encyclopedia

https://en.wikipedia.org/wiki/Strict_Transport_Security

HTTP Strict Transport Security. From Wikipedia, the free encyclopedia. Redirected from Strict Transport Security. HTTP Strict Transport Security. Is a web security policy mechanism which helps to protect websites against protocol downgrade attacks. It allows web servers to declare that web browsers (or other complying user agents) should only interact with it using secure HTTPS. And never via the insecure HTTP protocol. HSTS is an IETF. Protocol and is specified in RFC 6797. The HSTS specification is bas...

identitymeme.org

TLS « IdentityMeme.org

http://identitymeme.org/archives/tag/tls

JeffH’s musings on identity, security, protocols, SDOs, and tussles thereof…. Posts Tagged ‘TLS’. RFC6797 “HTTP Strict Transport Security (HSTS)” is published. Wednesday, November 21st, 2012. 8220;HTTP Strict Transport Security (HSTS)” is now available. It’s been a long haul to get to this point. And I thank all the folks who have contributed along the way, i.e. Collin Jackson. Who had the original idea [ForceHTTPS]. The authors thank Devdatta Akhawe, Michael Barrett, Ben Campbell,. JeffH sez check it out.

tools.ietf.org

RFC 6265 - HTTP State Management Mechanism

https://tools.ietf.org/html/rfc6265

Internet Engineering Task Force (IETF) A. Barth Request for Comments: 6265 U.C. Berkeley Obsoletes: 2965. April 2011 Category: Standards Track ISSN: 2070-1721 HTTP State Management Mechanism. Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at http:/ www.rfc-editor.org/info/rfc6265. And the IETF Trust's Legal Provisions Relating to IETF Documents ( http:/ trustee.ietf.org/license-info. In effect on the date of publication of this documen...

webblaze.cs.berkeley.edu

Secure Extensions - Web Security Research at Berkeley

http://webblaze.cs.berkeley.edu/2010/secureextensions

Protecting Browsers from Extension Vulnerabilities. Protecting Browsers from Extension Vulnerabilities. EECS Department. University of California, Berkeley. Technical Report No. UCB/EECS-2009-185. Author = {Adam Barth and Adrienne Porter Felt and Prateek Saxena and Aaron Boodman},. Title = {Protecting Browsers from Extension Vulnerabilities},. Booktitle = {Proc. of the 17th Network and Distributed System Security Symposium (NDSS 2010)},. More Berkeley web security research.

webblaze.cs.berkeley.edu

Mime Signatures - Web Security Research at Berkeley

http://webblaze.cs.berkeley.edu/2009/content-sniffing

Secure Content Sniffing for Web Browsers, or. How to Stop Papers from Reviewing Themselves. In IEEE Security and Privacy (Oakland 2009). Author = {Adam Barth and Juan Caballero and Dawn Song},. Title = {Secure Content Sniffing for Web Browsers or. How to Stop Papers from Reviewing Themselves},. Booktitle = {IEEE Security and Privacy (Oakland 2009),. Url = {http:/ www.adambarth.com/papers/2009/barth-caballero-song.pdf},. View by Mime Type:. Which is not available in the C library:.

tools.ietf.org

draft-abarth-principles-of-origin-00 - Principles of the Same-Origin Policy

https://tools.ietf.org/html/draft-abarth-principles-of-origin-00

Websec A. Barth Internet-Draft Google, Inc. Intended status: Informational February 21, 2011 Expires: August 25, 2011 Principles of the Same-Origin Policy. The list of Internet-Draft Shadow Directories can be accessed at http:/ www.ietf.org/shadow.html. And the IETF Trust's Legal Provisions Relating to IETF Documents Barth Expires August 25, 2011 [Page 1]. Internet-Draft Principles of the Same-Origin Policy February 2011. Http:/ trustee.ietf.org/license-info. Policy . . . . . . &#...Object Access . &...

schemehostport.com

Scheme/Host/Port: October 2011

http://www.schemehostport.com/2011_10_01_archive.html

Improving web security, one post at a time. Sunday, October 30, 2011. The Priority of Constituencies. Lawrence Lessig wrote in Code is Law. That the choices we make in writing code embody our values. This observation is especially true when building a browser because the browser mediates interactions between many distinct entities. Because the browser's security policy is at the heart of mediating those interactions, we should ask ourselves what values the browser's security policy embodies. By default, ...

kingsmountain.com

Jeff Hodges' Home Page: Protocol Architecture: SAML, LDAP, IETF, OASIS, W3C, Kantara, Web Services, etc.

http://kingsmountain.com/people/Jeff.Hodges

Photo credit: Bob Blakley. Senior Member Technical Staff - Ecosystem Security, PayPal, Inc. Perhaps not the 'Jeff Hodges' you were looking for? See the disambiguation page. Vocational blog: IdentityMeme.org. Avocational blog: EclecticReflections.com. This Internet Beachhead established 1994. This is my personal homepage. I'm not speaking here for any past or current employer or client. Also, various portions of these pages are woefully out-of-date. Eg, Kings Mountain Systems. And An LDAP Roadmap and FAQ.