%% You should probably cite draft-skokan-oauth-additional-hashes-04 instead of this revision. @techreport{skokan-oauth-additional-hashes-03, number = {draft-skokan-oauth-additional-hashes-03}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-skokan-oauth-additional-hashes/03/}, author = {Filip Skokan}, title = {{Additional Hash Algorithms for OAuth 2.0 PKCE and Proof-of-Possession}}, pagetotal = 15, year = , month = , day = , abstract = {This document defines SHA-512 as an additional hash algorithm for OAuth 2.0 Proof Key for Code Exchange (PKCE), mutual-TLS certificate- bound access tokens, and Demonstrating Proof of Possession (DPoP), for use in deployments operating under security policies that prohibit the use of SHA-256, which is otherwise mandated or the only option in these mechanisms.}, }