Skip to main content

Proof-Of-Possession Semantics for JSON Web Tokens (JWTs)
draft-ietf-oauth-proof-of-possession-00

The information below is for an old version of the document.
Document Type This is an older version of an Internet-Draft that was ultimately published as an RFC.
Authors Michael Jones , John Bradley , Hannes Tschofenig
Last updated 2015-01-22 (Latest revision 2014-07-21)
Replaces draft-jones-oauth-proof-of-possession
Stream Internet Engineering Task Force (IETF)
Formats
Expired & archived
Reviews
Stream WG state WG Document
Associated WG milestone
Mar 2016
Submit 'Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)' to the IESG
Document shepherd (None)
IESG IESG state Expired
Consensus boilerplate Unknown
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:

Abstract

This specification defines how to express a declaration in a JSON Web Token (JWT) that the presenter of the JWT possesses a particular key and that the recipient can cryptographically confirm proof-of- possession of the key by the presenter. This property is also sometimes described as the presenter being a holder-of-key.

Authors

Michael Jones
John Bradley
Hannes Tschofenig

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)