rfc-7486

HTTP Origin-Bound Authentication (HOBA)

S. Farrell, P. Hoffman, M. Thomas
date2015-03 streamIETF areasec wghttpauth statusEXPERIMENTAL pages28 canonicalhttps://www.rfc-editor.org/rfc/rfc7486 doi10.17487/RFC7486
HTTP Origin-Bound Authentication (HOBA) is a digital-signature-based design for an HTTP authentication method. The design can also be used in JavaScript-based authentication embedded in HTML. HOBA is an alternative to HTTP authentication schemes that require passwords and therefore avoids all problems related to passwords, such as leakage of server-side password databases.