Risks of the passport single signon protocol

摘要: Abstract Passport is a protocol that enables users to sign onto many different merchants' Web pages by authenticating themselves only once common server. This important because tend pick poor (guessable) user names and passwords repeat them at sites. notable as it being very widely deployed Microsoft. At the time of this writing, boasts 40 million consumers more than 400 authentications per second on average. We examine single signon protocol, identify several risks attacks. discuss flaw we discovered in interaction Netscape browsers leaves logged while informing him he has successfully out. Finally, suggest areas improvement.