Using SESAME to Secure Web Based Applications on an Intranet

摘要: The use of web technology within organisational Intranets is increasing. combination a standardised interface and the security features provided by TLS have made very attractive. however has some limitations, especially in its lack access control functionality. This paper focusses on alternatives to provide improved services based applications. SESAME architecture shown all services, with addition other such as service. Also because uses connection GSS-API which same paradigm used TLS, it be suitable replacement. Unfortunately servers browsers do not hooks for replacing technology, easily used. Two are therefore considered that overcome this limitation: new proposal before IETF extending carry attribute certificates hybrid solution built authors.