document: PAKE-based mutual HTTP authentication for preventing phishing attacks We developed a new Web authentication protocol with password-based mutual authentication which prevents various kinds of phishing attacks . This protocol provides a protection of user 's passwords against any phishers even if a dictionary attack is employed , and prevents phishers from imitating a false sense of successful authentication to users . The protocol is designed considering interoperability with many recent Web applications which requires many features which current HTTP authentication does not provide . The protocol is proposed as an Internet Draft submitted to IETF , and implemented in both server side ( as an Apache extension ) and client side ( as a Mozilla-based browser and an IE-based one ) .
doc_bio_tags: O O B O O O O O O O O O O O O O O B I O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O B O O O O O O B O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O