Vitaly Shmatikov CS 361S Web Authentication and Session Management.
Security protocols
Dos and Don’ts of Client Authentication on the Web