RFC 8747: Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs)

This specification describes how to declare in a CBOR Web Token (CWT) (which is defined by RFC 8392) that the presenter of the CWT possesses a particular…

Read RFC 8747 on the RFC Editor

Outgoing relationships (11 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 8126: Guidelines for Writing an IANA Considerations Section in RFCs
Normative reference — RFC 8392: CBOR Web Token (CWT)
Normative reference — RFC 8152: CBOR Object Signing and Encryption (COSE)
Normative reference — RFC 7049: Concise Binary Object Representation (CBOR)
Informative reference — RFC 8259: The JavaScript Object Notation (JSON) Data Interchange Format
Informative reference — RFC 7519: JSON Web Token (JWT)
Informative reference — RFC 8610: Concise Data Definition Language (CDDL): A Notational Convention to Express Concise Binary Object Representation (CBOR) and JSON Data Structures
Informative reference — RFC 7515: JSON Web Signature (JWS)
Informative reference — RFC 7800: Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)

Incoming relationships (8 related RFCs)

Normatively referenced by — RFC 9200: Authentication and Authorization for Constrained Environments Using the OAuth 2.0 Framework (ACE-OAuth)
Normatively referenced by — RFC 9528: Ephemeral Diffie-Hellman Over COSE (EDHOC)
Normatively referenced by — RFC 9201: Additional OAuth Parameters for Authentication and Authorization for Constrained Environments (ACE)
Normatively referenced by — RFC 9202: Datagram Transport Layer Security (DTLS) Profile for Authentication and Authorization for Constrained Environments (ACE)
Normatively referenced by — RFC 9679: CBOR Object Signing and Encryption (COSE) Key Thumbprint
Normatively referenced by — RFC 9124: A Manifest Information Model for Firmware Updates in Internet of Things (IoT) Devices
Informatively referenced by — RFC 9203: The Object Security for Constrained RESTful Environments (OSCORE) Profile of the Authentication and Authorization for Constrained Environments (ACE) Framework
Informatively referenced by — RFC 9781: A Concise Binary Object Representation (CBOR) Tag for Unprotected CBOR Web Token Claims Sets (UCCS)