Skip to main content

Enhanced JSON Web Token (JWT) Claim Constraints for Secure Telephone Identity Revisited (STIR) Certificates
RFC 9118

Revision differences

Document history

Date By Action
2021-08-23
(System)
Received changes through RFC Editor sync (created alias RFC 9118, changed title to 'Enhanced JSON Web Token (JWT) Claim Constraints for Secure Telephone Identity …
Received changes through RFC Editor sync (created alias RFC 9118, changed title to 'Enhanced JSON Web Token (JWT) Claim Constraints for Secure Telephone Identity Revisited (STIR) Certificates', changed abstract to 'RFC 8226 specifies the use of certificates for Secure Telephone Identity Credentials; these certificates are often called "Secure Telephone Identity Revisited (STIR) Certificates".  RFC 8226 provides a certificate extension to constrain the JSON Web Token (JWT) claims that can be included in the Personal Assertion Token (PASSporT), as defined in RFC 8225.  If the PASSporT signer includes a JWT claim outside the constraint boundaries, then the PASSporT recipient will reject the entire PASSporT.  This document updates RFC 8226; it provides all of the capabilities available in the original certificate extension as well as an additional way to constrain the allowable JWT claims.  The enhanced extension can also provide a list of claims that are not allowed to be included in the PASSporT.', changed pages to 12, changed standardization level to Proposed Standard, changed state to RFC, added RFC published event at 2021-08-23, changed IESG state to RFC Published, created updates relation between draft-ietf-stir-enhance-rfc8226 and RFC 8226)
2021-08-23
(System) RFC published