%% You should probably cite draft-thallapelly-oasnt-02 instead of this revision. @techreport{thallapelly-oasnt-00, number = {draft-thallapelly-oasnt-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-thallapelly-oasnt/00/}, author = {Arun Thallapelly}, title = {{OASNT: Attested Action Authorization Tokens}}, pagetotal = 25, year = , month = , day = , abstract = {This document defines the OASNT token, a compact JWS-based credential in which a hardware-bound device key attests that a specific human, on a device whose runtime integrity was assessed, authorized one specific action whose human-readable disclosure is cryptographically bound to the token (What You See Is What You Sign). Tokens are single-use, short-lived, and may additionally be bound to one concrete HTTP request.}, }