Passphone: Outsourcing Phone-Based Web Authentication While Protecting User Privacy
Triple Handshakes and Cookie Cutters: Breaking and Fixing Authentication over TLS