Cookie Hijacking in the Wild : Security and Privacy Implications
Triple Handshakes and Cookie Cutters: Breaking and Fixing Authentication over TLS