Skip to main content
U.S. Department of Energy
Office of Scientific and Technical Information

A case for avoiding security-enhanced HTTP tools to improve security for Web-based applications

Conference ·
OSTI ID:373888

This paper describes some of the general weaknesses of the current popular Hypertext Transmission Protocol (HTTP) security standards and products in an effort to show that these standards are not appealing for many applications. The author will then show how one can treat HTTP browsers and servers as untrusted elements in the network so that one can rely on other mechanisms to achieve better overall security than can be attained through today`s security-enhanced HTTP tools.

Research Organization:
Sandia National Labs., Albuquerque, NM (United States)
Sponsoring Organization:
USDOE, Washington, DC (United States)
DOE Contract Number:
AC04-94AL85000
OSTI ID:
373888
Report Number(s):
SAND--96-0687C; CONF-961053--1; ON: DE96006999
Country of Publication:
United States
Language:
English