Search results

spiffe_wit should be independent of attestation-based client authentication

Status: Open.

#39 In oauth-wg/oauth-spiffe-client-authentication;

· TakahikoKawasaki opened on Apr 27, 2026

X.509 SVID used as example in section 3.2.1

Status: Open.

#38 In oauth-wg/oauth-spiffe-client-authentication;

· scottr-nist opened on Mar 31, 2026

Distinguishing between non-SPIFFE and SPIFFE TLS authentication?

Status: Open.

#31 In oauth-wg/oauth-spiffe-client-authentication;

· stianst opened on Feb 24, 2026

Client ID for Client Authentication using X509-SVID

Status: Open.

#29 In oauth-wg/oauth-spiffe-client-authentication;

· TakahikoKawasaki opened on Feb 20, 2026

We need to clarify/defined what we mean by webpki

Status: Open.

#27 In oauth-wg/oauth-spiffe-client-authentication;

· ncamwing opened on Feb 4, 2026

When using X.509, allow for a webPKI server certificate

Status: Open.

#26 In oauth-wg/oauth-spiffe-client-authentication;

· arndt-s opened on Feb 3, 2026

Should we include WIT-SVID usage in this draft?

Status: Open.

#24 In oauth-wg/oauth-spiffe-client-authentication;

· PieterKas opened on Jan 15, 2026

SPIFFE Federation spiffe-TLS variant

Status: Open.

#22 In oauth-wg/oauth-spiffe-client-authentication;

· arndt-s opened on Nov 27, 2025

Add mention of client assertion reuse

Status: Open.

#20 In oauth-wg/oauth-spiffe-client-authentication;

· stianst opened on Nov 26, 2025

Cover "Certificate-Bound Access Tokens" part of RFC 8705

Status: Open.

#11 In oauth-wg/oauth-spiffe-client-authentication;

· dagdagdag83 opened on Jul 24, 2025

Should we point people that want to pursue this approach to raw RFC7523?

Status: Open.

#7 In oauth-wg/oauth-spiffe-client-authentication;

· PieterKas opened on May 15, 2025