Following the IETF-wide publication request, we’ve published another DPoP draft that addresses additional review comments received to date. This version is destined for the IESG Telechat on April 13, 2023.
Recent changes as described in the history log are:
- Add sec considerations sub-section about binding to client identity
- Explicitly say that nonces must be unpredictable
- Change to a numbered list in ‘Checking DPoP Proofs’
- Editorial adjustments
- Incorporated HTTP header field definition and RFC 8792 ‘\’ line wrapping suggestions by Mark Nottingham
The specification is available at: