draft-ietf-oauth-cross-device-security

Cross-Device Flows: Security Best Current Practice

streamIETF groupoauth stateactive intendedBest Current Practice pages69 rev16 expires2026-09-03 canonicalhttps://datatracker.ietf.org/doc/draft-ietf-oauth-cross-device-security/
This document describes threats against cross-device flows along with practical mitigations, protocol selection guidance, and a summary of formal analysis results identified as relevant to the security of cross-device flows. It serves as a security guide to system designers, architects, product managers, security specialists, fraud analysts and engineers implementing cross-device flows.