The implementation of web sessions is a somewhat anarchic and largely unstructured process. Our goal with the present paper is to provide a disciplined perspective of which are the relative strengths and weaknesses of the most common techniques to implement web sessions, with a particular focus on their security. We clarify common misconceptions in the recent “cookies vs tokens” debate and we p...

This memo contains a table of commonly occurring attributes in headings and on envelopes of e-mail messages. The document compiles information from other RFC-s such as RFC 821, RFC 822, RFC 1036, RFC 1327, RFC 1496, RFC 1521, RFC 1766 and X.400. A few commonly occurring attributes which are not defined in RFC-s are also included. For each attribute, the memo gives a short description and a refe...

We compare the performance of HTTP/1.0 and 1.1 on a high latency, low bandwidth wireless network. HTTP/1.0 is known to have low throughput and consume excessive network and server resources on today's graphics-intensive web pages. A high latency, low bandwidth network only magniies these problems. HTTP/1.1 was developed to remedy these problems. We show that on a Ricochet wireless network, HTTP...

An increasing number of popular websites support the SSL/TLS protocol, the current standard for encrypting web traffic. Most commonly seen as part of the HTTPS protocol, SSL/TLS provides data and message confidentiality to protect users browsing the web from malicious attackers attempting to eavesdrop or tamper with traffic. Nonetheless, about 48% of popular websites remain insecure by only sup...

This document specifies a few extensions of HTTP authentication framework for interactive clients. Recently, fundamental features of HTTP-level authentication is not enough for complex requirements of various Web-based applications. This makes these applications to implement their own authentication frameworks using HTML Forms and other means, which becomes one of the hurdles against introducin...

HTTP-based Adaptive Streaming (HAS) has emerged as the prominent technology for the delivery of audiovisual content over the Internet in recent years and has a major impact on network traffic. Although traditional stateful session-based streaming solution based on UDP was used initially for media content delivery, researchers and practitioners soon realize that HAS technology, due to get throug...

Some philosophers have regarded the connection between hues and certain arousal or affective qualities as so intimate as to make them inseparable, and this “necessary concomitance view” has been invoked to defend functionalism against arguments based on inverted spectra. Support for the necessary concomitance view has sometimes been thought to accrue from experiments in psychology. This paper e...

"HTTP/1.0", includes the specification for a Basic Access Authentication scheme. This scheme is not considered to be a secure method of user authentication (unless used in conjunction with some external secure system such as SSL [5]), as the user name and password are passed over the network as cleartext. This document also provides the specification for HTTP's authentication framework, the ori...

One ideal of configuration management is to specify only desired behavior in a high-level language, while an automatic configuration management system assures that behavior on an ongoing basis. We call a self-managing subsystem of this kind a closure. To better understand the nature of closures, we implemented an HTTP service closure on top of an Apache web server. While the procedure for build...