IETF approves new internet standards to secure authentication tokens

guest · Oct 12, 2018

IETF approves new internet standards to secure authentication tokens
New IETF standards aim to protect authentication tokens against replay attacks
October 12, 2018
https://www.zdnet.com/article/ietf-approves-new-internet-standards-to-secure-authentication-tokens/

Authentication tokens are used everywhere online these days. When a person logs into his Google or Facebook account, an authentication token is generated and stored in a cookie file inside the user's browser.

But authentication tokens haven't only been used with browser cookies and websites. They are also used inside the OAuth protocol, the JSON Web Token (JWT) standard [...]

This week, with contributions from Google, Microsoft, and Kings Mountain Systems engineers, the IETF has formally approved three new standards meant to protect token-based authentication systems:
• RFC 4871 - The Token Binding Protocol Version 1.0
• RFC 4872 - Transport Layer Security (TLS) Extension for Token Binding Protocol Negotiation
• RFC 4873 - Token Binding over HTTP
These three standards are meant to add an extra layer of security for the process of generating and negotiating a new access/authentication token.
Click to expand...

Log in or Sign up

IETF approves new internet standards to secure authentication tokens

guest Guest

Log in or Sign up

IETF approves new internet standards to secure authentication tokens

guest Guest

Useful Searches