@techreport{torvinen-http-eap-01, number = {draft-torvinen-http-eap-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-torvinen-http-eap/01/}, author = {Jari Arkko and Vesa Torvinen and Aki Niemi}, title = {{HTTP Authentication with EAP}}, pagetotal = 9, year = 2001, month = nov, day = 21, abstract = {This document describes a HTTP authentication scheme using PPP Extensible Authentication Protocol (EAP). HTTP EAP authentication enables HTTP connections to be authenticated using any of the authentication schemes supported through EAP. EAP performs the authentication without sending the password in the clear text format (which is the biggest weakness of the Basic HTTP authentication scheme, for example). EAP is useful for HTTP protocol because it opens up several new authentication schemes without additional specification work. The same benefits can be reached by any other protocols, which apply HTTP authentication, such as Session Initiation Protocol (SIP).}, }