Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 14
Abstract: This specification describes how to declare in a CBOR Web Token (CWT) (which is defined by RFC 8392) that the presenter of the CWT possesses a particular proof-of-possession key. Being able to prove possession of a key is also sometimes described as being the holder-of-key. This specification provides equivalent functionality to "Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)" (RFC 7800) but using Concise Binary Object Representation (CBOR) and CWTs rather than JavaScript Object Notation (JSON) and JSON Web Tokens (JWTs).
Publication Date: 2020-03-01
Status Note: Proposed Standard
DOI: 10.17487/RFC8747
Link: https://doi.org/10.17487/RFC8747
Author(s): Michael B. Jones
Ludwig Seitz
Göran Selander
Samuel Erdtman
Hannes Tschofenig
Keyword(s): CWT, Proof-of-Possession

Latest version of IETF RFC 8747

Document Versions — IETF RFC 8747

▶ IETF RFC 8747 (2020-03-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IANA, "CBOR Web Token Claims", <https://www.iana.org/assignments/cwt>. EXTERNAL
IETF RFC 2119 [Active*]
IETF RFC 7049 [Superseded*]
IETF RFC 8126 [Active*]
IETF RFC 8152 [Superseded*]
IETF RFC 8174 [Active*]
IETF RFC 8392 [Active*]

Bibliographic Reference(s)

IETF.draft-ietf-ace-oauth-authz-21 — I-D.ietf-ace-oauth-authz EXTERNAL
IANA, "JSON Web Token (JWT)", <https://www.iana.org/assignments/jwt>. EXTERNAL
Cantor, S., Kemp, J., Philpott, R., and E. Maler, "Assertions and Protocol for the OASIS Security Assertion Markup Language (SAML) V2.0", OASIS Standard saml-core-2.0-os, March 2005, <https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf>. EXTERNAL
IETF RFC 7515 [Active*]
IETF RFC 7519 [Active*]
IETF RFC 7800 [Active*]
IETF RFC 8259 [Active*]
IETF RFC 8610 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8747.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8747, Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs). Available at https://doi.org/10.17487/RFC8747

Snippet:

IETF RFC 8747, Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs). Available at https://doi.org/10.17487/RFC8747

HTML (ISO 690 compliant)

Preview:

IETF RFC 8747, Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs). Available at https://doi.org/10.17487/RFC8747

Snippet:

<span class="citation"><cite>IETF RFC 8747</cite>, Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs). Available at <a href="https://doi.org/10.17487/RFC8747" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8747</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8747, Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs)
doi: 10.17487/RFC8747
url: https://doi.org/10.17487/RFC8747

Snippet:

<li>
<cite id="bib-rfc8747">IETF RFC 8747</cite>, Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs)
<span class="doi">10.17487/RFC8747</span>
</li>

Referenced By

IETF RFC 9528 [Active*]