%% You should probably cite draft-ietf-oauth-dpop instead of this I-D. @techreport{fett-oauth-dpop-00, number = {draft-fett-oauth-dpop-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/00/}, author = {Daniel Fett and John Bradley and Brian Campbell and Torsten Lodderstedt and Michael B. Jones}, title = {{OAuth 2.0 Demonstration of Proof-of-Possession at the Application Layer}}, pagetotal = 13, year = , month = , day = , abstract = {This document defines a sender-constraint mechanism for OAuth 2.0 access tokens and refresh tokens utilizing an application-level proof-of-possession mechanism based on public/private key pairs.}, }