%% You should probably cite draft-ietf-oauth-v2-http-mac-05 instead of this revision. @techreport{ietf-oauth-v2-http-mac-03, number = {draft-ietf-oauth-v2-http-mac-03}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-http-mac/03/}, author = {Justin Richer and William Mills and Hannes Tschofenig}, title = {{OAuth 2.0 Message Authentication Code (MAC) Tokens}}, pagetotal = 26, year = 2013, month = feb, day = 25, abstract = {This specification describes how to use MAC Tokens in HTTP requests to access OAuth 2.0 protected resources. An OAuth client willing to access a protected resource needs to demonstrate possession of a crytographic key by using it with a keyed message digest function to the request. The document also defines a key distribution protocol for obtaining a fresh session key.}, }