WebAppAuth: An Architecture to Protect from Compromised First-Party Web Servers

Pascal Wichmann, Sam Ansari, Hannes Federrath, Jens Lindemann

2023

Abstract

We present the WebAppAuth architecture for protecting client-side web applications even from attackers who fully control the web server. WebAppAuth signs all files sent to the client on a secure offline device or a hardware security module never accessible by the web server. Public keys are propagated through a key registry that is maintained by two independent key registration authorities, thus protecting users even on their first visit to the web application. Our threat model covers attackers who gain full control over the targeted domain and its DNS and DNSSEC configuration.

Paper Citation

in Harvard Style

Wichmann P., Ansari S., Federrath H. and Lindemann J. (2023). WebAppAuth: An Architecture to Protect from Compromised First-Party Web Servers. In Proceedings of the 20th International Conference on Security and Cryptography - Volume 1: SECRYPT; ISBN 978-989-758-666-8, SciTePress, pages 548-556. DOI: 10.5220/0012141700003555

in Bibtex Style

@conference{secrypt23,
author={Pascal Wichmann and Sam Ansari and Hannes Federrath and Jens Lindemann},
title={WebAppAuth: An Architecture to Protect from Compromised First-Party Web Servers},
booktitle={Proceedings of the 20th International Conference on Security and Cryptography - Volume 1: SECRYPT},
year={2023},
pages={548-556},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0012141700003555},
isbn={978-989-758-666-8},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 20th International Conference on Security and Cryptography - Volume 1: SECRYPT
TI - WebAppAuth: An Architecture to Protect from Compromised First-Party Web Servers
SN - 978-989-758-666-8
AU - Wichmann P.
AU - Ansari S.
AU - Federrath H.
AU - Lindemann J.
PY - 2023
SP - 548
EP - 556
DO - 10.5220/0012141700003555
PB - SciTePress