<<---Back to Micke´s Web Security Main Page

SHTTP
last changed 980613
 

 
SHTTP- info SHTTP- links
What is SHTTP ?  

S-HTTP, Secure HTTP,[ ],[ ] is an extension to the HTTP protocol. It was first proposed by EIT/ Commerce Net but is now in the hands of Terisia System. It has been available for many years and is supported by several reputable companies, S-HTTP is implemented in many Mosaic browser. S-HTTP is capable of distinguishing the origin of a particular document on any server, thereby protecting property rights. S-HTTP provides a wide variety of mechanisms to provide for confidentiality, authentication, and integrity. 
 SSL and S-HTTP have very different designs and goals so it is possible to use the two protocols together, just use S-HTTP on top of SSL. Whereas SSL is designed to establish a secure connection between two computers, S-HTTP is designed to send individual messages securely, so S-HTTP can be used to complement SSL and other similar protocols as PCT. 
S-HTTP has been submitted (1995) to the Internet Engineering Task Force (IETF) for approval as a standard. Status is not clear, SSL seems to have very little support out there, seems to have no interest from IETF and seems to have fallen in the shadow of SSL, which is marketed as a standard much more aggressive. 
 

Terisia systems 
http://www.terisa.com/shttp/intro.html 
 
SHTTP description
http://www.homeport.org/~adam/shttp.html

the following link seems to be dead most of the times 
http://www.eit.com/creations/s-http/ 
 
 

 
 

 
Created 980414 by Micke Pettersson, mikael.pettersson@tsl.uu.se, http://www3.tsl.uu.se/~micke