Fu K, Sit E, Smith K, Feamster N.  2001.  Dos and don'ts of client authentication on the web. Proceedings of the 10th conference on USENIX Security Symposium - Volume 10. :19-19.