[OAUTH-WG] I-D Action: draft-ietf-oauth-attestation-based-client-auth-12.txt
internet-drafts@ietf.org Tue, 13 October 2026 06:13 UTC
Received: by mx.ietf.org (Postfix) id 2EE0059; Tue, 13 Oct 2026 06:13:48 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ietf.org; s=mail; t=1791872028; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=lxd/9nz7+iZMtocNeJ1zYB7uzme1OjBU7ok5s+lqkaQ=; b=d93ti7H65Kn/ae5UnmsbRfVWguzggLLG+lYIQItP1TY9do0OZV/vQAhZMZPlO1zVOUEAXq FuLiiBFaYtR17q6Wf3PCfRLR+/FUqNqpL4MQZici8MXP4Iz7RzYdsvQYCGg1qdfw+8eyyX 9Qwd7FXbMWLEvdq379Xv0raScOz0k8Q=
Authentication-Results: ORIGINATING; auth=pass smtp.auth=mail2@ietf.org smtp.mailfrom=internet-drafts@ietf.org
Received: from [10.244.8.22] (gaia.k8s.ietf.org [4.156.85.76]) by mail2.ietf.org (Postfix) with ESMTP id F268813A89074; Mon, 12 Oct 2026 23:13:47 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 12.80.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <179187202792.317868.18143940145664630710@dt-datatracker-66f49ddcbd-klxkm>
Date: Mon, 12 Oct 2026 23:13:47 -0700
Message-ID-Hash: 2SIVOS7AMFKWZ4LXMC23FWNYWA2J5AQE
X-Message-ID-Hash: 2SIVOS7AMFKWZ4LXMC23FWNYWA2J5AQE
X-MailFrom: internet-drafts@ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-oauth.ietf.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: oauth@ietf.org
X-Mailman-Version: 3.3.10
Reply-To: oauth@ietf.org
Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-attestation-based-client-auth-12.txt
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/mlLLaQskusjLVnp6fqRypjWMvnE>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>
Internet-Draft draft-ietf-oauth-attestation-based-client-auth-12.txt is now
available. It is a work item of the Web Authorization Protocol (OAUTH) WG of
the IETF.
Title: OAuth 2.0 Attestation-Based Client Authentication
Authors: Tobias Looker
Paul Bastian
Christian Bormann
Name: draft-ietf-oauth-attestation-based-client-auth-12.txt
Pages: 53
Dates: 2026-10-12
Abstract:
This specification defines an extension to the OAuth 2.0 protocol
(RFC 6749) that enables a client instance to include a key-bound
attestation when interacting with an Authorization Server or Resource
Server. This mechanism allows a client instance to prove its
authenticity, as verified by a client attester, without revealing its
target audience to that attester. It may also serve as a mechanism
for client authentication as per OAuth 2.0.
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-attestation-based-client-auth/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-oauth-attestation-based-client-auth-12.html
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-oauth-attestation-based-client-auth-12
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
- [OAUTH-WG] I-D Action: draft-ietf-oauth-attestati… internet-drafts