RFC 10027: Best Current Practice for Security of Cross-Device Flows

This document describes threats against cross-device flows along with practical mitigations, protocol selection guidance, and a summary of formal analysis…

Read RFC 10027 on the RFC Editor

Outgoing relationships (7 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 6749: The OAuth 2.0 Authorization Framework
Normative reference — RFC 7662: OAuth 2.0 Token Introspection
Normative reference — RFC 7636: Proof Key for Code Exchange by OAuth Public Clients
Normative reference — RFC 8628: OAuth 2.0 Device Authorization Grant
Informative reference — RFC 9635: Grant Negotiation and Authorization Protocol (GNAP)