%% You should probably cite draft-ietf-oauth-signed-http-request instead of this I-D. @techreport{richer-oauth-signed-http-request-01, number = {draft-richer-oauth-signed-http-request-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-richer-oauth-signed-http-request/01/}, author = {Justin Richer and John Bradley and Hannes Tschofenig}, title = {{A Method for Signing an HTTP Requests for OAuth}}, pagetotal = 11, year = 2014, month = apr, day = 24, abstract = {This document a method for offering data origin authentication and integrity protection of HTTP requests. To convey the relevant data items in the request a JSON-based encapsulation is used and the JSON Web Signature (JWS) technique is re-used. JWS offers integrity protection using symmetric as well as asymmetric cryptography.}, }