Sebastian Gajek Mark Manulis Ahmad-Reza Sadeghi Jörg Schwenk Provably secure browser-based user-aware mutual authentication over TLS. 300-311 2008 ASIACCS http://doi.acm.org/10.1145/1368310.1368354 conf/ccs/2008asia db/conf/ccs/asiaccs2008.html#GajekMSS08