Overall, transport layer security with session-aware user authentication offers a promising approach to solving man-in-the-middle attack problems by leveraging the legacy authentication mechanisms and systems that the general public has become accustomed to using.
['Rolf Oppliger', 'Ralf Hauser', 'David A. Basin']
SSL/TLS Session-Aware User Authentication