Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 15
Abstract: This specification describes how to declare in a JSON Web Token (JWT) that the presenter of the JWT possesses a particular proof-of- possession key and how the recipient can cryptographically confirm proof of possession of the key by the presenter. Being able to prove possession of a key is also sometimes described as the presenter being a holder-of-key.
Publication Date: 2016-04-01
Status Note: Proposed Standard
DOI: 10.17487/RFC7800
Link: https://doi.org/10.17487/RFC7800
Author(s): Michael B. Jones
John Bradley
Hannes Tschofenig
Keyword(s): JWT, Proof-of-Possession

Latest version of IETF RFC 7800

Document Versions — IETF RFC 7800

▶ IETF RFC 7800 (2016-04-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IANA, "JSON Web Token Claims", < http://www.iana.org/assignments/jwt >. EXTERNAL
IETF RFC 2119 [Active*]
IETF RFC 3629 [Active*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 5226 [Superseded*]
IETF RFC 5246 [Superseded*]
IETF RFC 6125 [Superseded*]
IETF RFC 7156 [Active*]
IETF RFC 7157 [Active*]
IETF RFC 7159 [Superseded*]
IETF RFC 7516 [Active*]
IETF RFC 7517 [Active*]
IETF RFC 7519 [Active*]

Bibliographic Reference(s)

IETF.draft-ietf-oauth-pop-architecture-07 — OAUTH-POP-ARCH EXTERNAL
Cantor, S., Kemp, J., Philpott, R., and E. Maler, "Assertions and Protocol for the OASIS Security Assertion Markup Language (SAML) V2.0", OASIS Standard saml-core- 2.0-os, March 2005, < http://docs.oasis-open.org/security/saml/v2.0/ >. EXTERNAL
Sakimura, N., Bradley, J., Jones, M., de Medeiros, B., and C. Mortimore, "OpenID Connect Core 1.0", November 2014, < http://openid.net/specs/openid-connect-core-1_0.html >. EXTERNAL
IETF RFC 7638 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7800.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7800, Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs). Available at https://doi.org/10.17487/RFC7800

Snippet:

IETF RFC 7800, Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs). Available at https://doi.org/10.17487/RFC7800

HTML (ISO 690 compliant)

Preview:

IETF RFC 7800, Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs). Available at https://doi.org/10.17487/RFC7800

Snippet:

<span class="citation"><cite>IETF RFC 7800</cite>, Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs). Available at <a href="https://doi.org/10.17487/RFC7800" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7800</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7800, Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)
doi: 10.17487/RFC7800
url: https://doi.org/10.17487/RFC7800

Snippet:

<li>
<cite id="bib-rfc7800">IETF RFC 7800</cite>, Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)
<span class="doi">10.17487/RFC7800</span>
</li>

Referenced By

IETF RFC 8705 [Active*]
IETF RFC 8747 [Active*]
IETF RFC 9449 [Active*]