%% You should probably cite draft-ietf-oauth-token-binding-08 instead of this revision. @techreport{ietf-oauth-token-binding-01, number = {draft-ietf-oauth-token-binding-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-oauth-token-binding/01/}, author = {Michael B. Jones and John Bradley and Brian Campbell}, title = {{OAuth 2.0 Token Binding}}, pagetotal = 12, year = 2016, month = sep, day = 20, abstract = {This specification enables OAuth 2.0 implementations to apply Token Binding to Access Tokens and Refresh Tokens. This cryptographically binds these tokens to the TLS connections over which they are intended to be used. This use of Token Binding protects these tokens from man-in-the-middle and token export and replay attacks.}, }