Dos and Don’ts of Client Authentication on the Web

We propose a set of hints for designing a secure client
authentication scheme. Using these hints, we present the
design and analysis of a simple authentication scheme
secure against forgeries by the interrogative adversary.
In conjunction with SSL, our scheme is secure against
forgeries by the active adversary.
(Link: Dos and Don’ts of Client Authentication on the Web)