@Article{ oppliger&06, author = {Rolf Oppliger and Ralf Hauser and David Basin}, issn = {0130-3664}, journal = {Computer Communications}, volume = 29, pages = {2238--2246}, title = {SSL/TLS session-aware user authentication --- Or how to effectively thwart the man-in-the-middle}, year = 2006 }