Mark Manulis, Douglas Stebila, Nick Denham: Secure Modular Password Authentication for the Web Using Channel Bindings. SSR 2014: 167-189