@misc{rfc9711, series = {Request for Comments}, number = 9711, howpublished = {RFC 9711}, publisher = {RFC Editor}, doi = {10.17487/RFC9711}, url = {https://www.rfc-editor.org/info/rfc9711}, author = {Laurence Lundblade and Giridhar Mandyam and Jeremy O'Donoghue and Carl Wallace}, title = {{The Entity Attestation Token (EAT)}}, pagetotal = 85, year = 2025, month = apr, abstract = {An Entity Attestation Token (EAT) provides an attested claims set that describes the state and characteristics of an entity, a device such as a smartphone, an Internet of Things (IoT) device, network equipment, or such. This claims set is used by a relying party, server, or service to determine the type and degree of trust placed in the entity. An EAT is either a CBOR Web Token (CWT) or a JSON Web Token (JWT) with attestation-oriented claims.}, }