Skip to content

Commit 07d3e16

Browse files
author
ID Bot
committed
Script updating gh-pages from 9801885. [ci skip]
1 parent 30a3c8d commit 07d3e16

2 files changed

Lines changed: 8 additions & 2 deletions

File tree

draft-ietf-oauth-rfc8725bis.html

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1567,7 +1567,10 @@ <h3 id="name-cross-jwt-confusion">
15671567
<p id="section-2.8-1">As JWTs are used by more protocols in diverse ways, it becomes increasingly
15681568
important to prevent JWT tokens that have been issued for one purpose
15691569
being used for another.
1570-
Note that this is a specific type of substitution attack.<a href="#section-2.8-1" class="pilcrow"></a></p>
1570+
Note that this is a specific type of substitution attack.
1571+
If the JWT could be used in an application context in which it could be
1572+
confused with other kinds of JWTs,
1573+
then mitigations can be employed to prevent these substitution attacks.<a href="#section-2.8-1" class="pilcrow"></a></p>
15711574
<p id="section-2.8-2">For mitigations, see Sections <a href="#validate-iss-sub" class="auto internal xref">3.8</a>, <a href="#use-aud" class="auto internal xref">3.9</a>, <a href="#use-typ" class="auto internal xref">3.11</a>, and <a href="#preventing-confusion" class="auto internal xref">3.12</a>.<a href="#section-2.8-2" class="pilcrow"></a></p>
15721575
</section>
15731576
</div>

draft-ietf-oauth-rfc8725bis.txt

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -310,7 +310,10 @@ Table of Contents
310310
As JWTs are used by more protocols in diverse ways, it becomes
311311
increasingly important to prevent JWT tokens that have been issued
312312
for one purpose being used for another. Note that this is a specific
313-
type of substitution attack.
313+
type of substitution attack. If the JWT could be used in an
314+
application context in which it could be confused with other kinds of
315+
JWTs, then mitigations can be employed to prevent these substitution
316+
attacks.
314317

315318
For mitigations, see Sections 3.8, 3.9, 3.11, and 3.12.
316319

0 commit comments

Comments
 (0)