draft-nandakumar-moq-generic-dpop-proof

Application-Agnostic Demonstration Proof of Possession (DPoP) Framework

groupnone stateactive pages23 rev00 expires2026-09-03 canonicalhttps://datatracker.ietf.org/doc/draft-nandakumar-moq-generic-dpop-proof/
This document describes a generic framework for Demonstrating Proof of Possession (DPoP) that extends beyond HTTP-specific implementations. Building upon RFC 9449, this framework provides a protocol-agnostic approach for sender-constraining tokens through cryptographic proof of possession, enabling secure token binding across various application protocols and contexts. The framework supports both JWT-based proofs (for compatibility with existing OAuth deployments) and CWT-based proofs (for compact binary encoding and interoperability with Common Access Token systems).