%% You should probably cite draft-richer-oauth-httpsig-03 instead of this revision. @techreport{richer-oauth-httpsig-01, number = {draft-richer-oauth-httpsig-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-richer-oauth-httpsig/01/}, author = {Justin Richer}, title = {{OAuth Proof of Possession Tokens with HTTP Message Signatures}}, pagetotal = 16, year = , month = , day = , abstract = {This extension to the OAuth 2.0 authorization framework defines a method for using HTTP Message Signatures to bind access tokens to keys held by OAuth 2.0 clients. Discussion Venues This note is to be removed before publishing as an RFC. Discussion of this document takes place on the Web Authorization Protocol Working Group mailing list (oauth@ietf.org), which is archived at https://mailarchive.ietf.org/arch/browse/oauth/. Source for this draft and an issue tracker can be found at https://github.com/jricher/draft-richer-oauth-httpsig.}, }