%% You should probably cite rfc8705 instead of this I-D. @techreport{ietf-oauth-mtls-00, number = {draft-ietf-oauth-mtls-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-oauth-mtls/00/}, author = {Brian Campbell and John Bradley and Nat Sakimura and Torsten Lodderstedt}, title = {{Mutual TLS Profiles for OAuth Clients}}, pagetotal = 10, year = , month = , day = , abstract = {This document describes Transport Layer Security (TLS) mutual authentication using X.509 certificates as a mechanism for both OAuth client authentication to the token endpoint as well as for sender constrained access to OAuth protected resources.}, }