%% You should probably cite draft-ietf-oauth-signed-http-request instead of this I-D. @techreport{richer-oauth-signed-http-request-00, number = {draft-richer-oauth-signed-http-request-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/html/draft-richer-oauth-signed-http-request-00}, author = {John Bradley and Hannes Tschofenig}, title = {{A Method for Signing an HTTP Requests for OAuth}}, pagetotal = 11, year = , month = , day = , abstract = {This document a method for offering data origin authentication and integrity protection of HTTP requests. To convey the relevant data items in the request a JSON-based encapsulation is used and the JSON Web Signature (JWS) technique is re-used. JWS offers integrity protection using symmetric as well as asymmetric cryptography.}, }