Transport Layer Security Channel ID: Difference between revisions

Revision as of 14:28, 14 December 2012

Revision as of 09:29, 24 January 2013

Line 1:

{{dead end|date=December 2012}}

{{external links|date=December 2012}}

'''TLS-OBC''' is an RFC proposal that increases SSL/TLS security by using certificates on both ends of the TLS connection. What's special here is that the client is permitted to dynamically create a local, self -signed certificate that provides additional security.

A useful introduction is available here:

[http://www.browserauth.net/ TLS-OBC for System Administrators]

[http://tools.ietf.org/html/draft-balfanz-tls-obc-01 TLS-OBC RFC]

It can also protect users from the [http://security.stackexchange.com/a/12419/396 "Related Domain Cookie Attack"], [http://stackoverflow.com/q/9636857/328397 additional info is available here]

== External links ==

* [http://www.browserauth.net/ TLS-OBC for System Administrators]

* [http://tools.ietf.org/html/draft-balfanz-tls-obc-01 TLS-OBC RFC]

[[Category:Transport layer protocols]]