|
21 | 21 | covering threats and attacks that have been discovered |
22 | 22 | since RFC 8725 was published. |
23 | 23 | " name="description"> |
24 | | -<meta content="xml2rfc 3.30.2" name="generator"> |
| 24 | +<meta content="xml2rfc 3.31.0" name="generator"> |
25 | 25 | <meta content="JSON Web Token" name="keyword"> |
26 | 26 | <meta content="JWT" name="keyword"> |
27 | 27 | <meta content="JSON Object Signing and Encryption" name="keyword"> |
|
36 | 36 | <meta content="Cryptography" name="keyword"> |
37 | 37 | <meta content="draft-ietf-oauth-rfc8725bis-latest" name="ietf.draft"> |
38 | 38 | <!-- Generator version information: |
39 | | - xml2rfc 3.30.2 |
40 | | - Python 3.12.11 |
| 39 | + xml2rfc 3.31.0 |
| 40 | + Python 3.12.12 |
41 | 41 | ConfigArgParse 1.7 |
42 | 42 | google-i18n-address 3.1.1 |
43 | 43 | intervaltree 3.1.0 |
44 | 44 | Jinja2 3.1.6 |
45 | 45 | lxml 5.3.1 |
46 | | - platformdirs 4.4.0 |
| 46 | + platformdirs 4.5.0 |
47 | 47 | pycountry 24.6.1 |
48 | 48 | PyYAML 6.0.2 |
49 | 49 | requests 2.32.5 |
50 | | - setuptools 80.9.0 |
51 | | - wcwidth 0.2.13 |
| 50 | + wcwidth 0.2.14 |
52 | 51 | --> |
53 | 52 | <link href="draft-ietf-oauth-rfc8725bis.xml" rel="alternate" type="application/rfc+xml"> |
54 | 53 | <link href="#copyright" rel="license"> |
|
1067 | 1066 | <thead><tr> |
1068 | 1067 | <td class="left">Internet-Draft</td> |
1069 | 1068 | <td class="center">JWT BCP</td> |
1070 | | -<td class="right">September 2025</td> |
| 1069 | +<td class="right">October 2025</td> |
1071 | 1070 | </tr></thead> |
1072 | 1071 | <tfoot><tr> |
1073 | 1072 | <td class="left">Sheffer, et al.</td> |
1074 | | -<td class="center">Expires 2 April 2026</td> |
| 1073 | +<td class="center">Expires 23 April 2026</td> |
1075 | 1074 | <td class="right">[Page]</td> |
1076 | 1075 | </tr></tfoot> |
1077 | 1076 | </table> |
|
1090 | 1089 | <a href="https://www.rfc-editor.org/rfc/rfc7519" class="eref">7519</a> (if approved)</dd> |
1091 | 1090 | <dt class="label-published">Published:</dt> |
1092 | 1091 | <dd class="published"> |
1093 | | -<time datetime="2025-09-29" class="published">29 September 2025</time> |
| 1092 | +<time datetime="2025-10-20" class="published">20 October 2025</time> |
1094 | 1093 | </dd> |
1095 | 1094 | <dt class="label-intended-status">Intended Status:</dt> |
1096 | 1095 | <dd class="intended-status">Best Current Practice</dd> |
1097 | 1096 | <dt class="label-expires">Expires:</dt> |
1098 | | -<dd class="expires"><time datetime="2026-04-02">2 April 2026</time></dd> |
| 1097 | +<dd class="expires"><time datetime="2026-04-23">23 April 2026</time></dd> |
1099 | 1098 | <dt class="label-authors">Authors:</dt> |
1100 | 1099 | <dd class="authors"> |
1101 | 1100 | <div class="author"> |
@@ -1161,7 +1160,7 @@ <h2 id="name-status-of-this-memo"> |
1161 | 1160 | time. It is inappropriate to use Internet-Drafts as reference |
1162 | 1161 | material or to cite them other than as "work in progress."<a href="#section-boilerplate.1-3" class="pilcrow">¶</a></p> |
1163 | 1162 | <p id="section-boilerplate.1-4"> |
1164 | | - This Internet-Draft will expire on 2 April 2026.<a href="#section-boilerplate.1-4" class="pilcrow">¶</a></p> |
| 1163 | + This Internet-Draft will expire on 23 April 2026.<a href="#section-boilerplate.1-4" class="pilcrow">¶</a></p> |
1165 | 1164 | </section> |
1166 | 1165 | </div> |
1167 | 1166 | <div id="copyright"> |
@@ -1322,16 +1321,19 @@ <h2 id="name-copyright-notice"> |
1322 | 1321 | <p id="section-toc.1-1.9.1"><a href="#appendix-B" class="auto internal xref">Appendix B</a>. <a href="#name-document-history" class="internal xref">Document History</a></p> |
1323 | 1322 | <ul class="compact toc ulBare ulEmpty"> |
1324 | 1323 | <li class="compact toc ulBare ulEmpty" id="section-toc.1-1.9.2.1"> |
1325 | | - <p id="section-toc.1-1.9.2.1.1"><a href="#appendix-B.1" class="auto internal xref">B.1</a>. <a href="#name-draft-ietf-oauth-rfc8725bis" class="internal xref">draft-ietf-oauth-rfc8725bis-00</a></p> |
| 1324 | + <p id="section-toc.1-1.9.2.1.1"><a href="#appendix-B.1" class="auto internal xref">B.1</a>. <a href="#name-draft-ietf-oauth-rfc8725bis" class="internal xref">draft-ietf-oauth-rfc8725bis-01</a></p> |
1326 | 1325 | </li> |
1327 | 1326 | <li class="compact toc ulBare ulEmpty" id="section-toc.1-1.9.2.2"> |
1328 | | - <p id="section-toc.1-1.9.2.2.1"><a href="#appendix-B.2" class="auto internal xref">B.2</a>. <a href="#name-draft-sheffer-oauth-rfc8725" class="internal xref">draft-sheffer-oauth-rfc8725bis-02</a></p> |
| 1327 | + <p id="section-toc.1-1.9.2.2.1"><a href="#appendix-B.2" class="auto internal xref">B.2</a>. <a href="#name-draft-ietf-oauth-rfc8725bis-" class="internal xref">draft-ietf-oauth-rfc8725bis-00</a></p> |
1329 | 1328 | </li> |
1330 | 1329 | <li class="compact toc ulBare ulEmpty" id="section-toc.1-1.9.2.3"> |
1331 | | - <p id="section-toc.1-1.9.2.3.1"><a href="#appendix-B.3" class="auto internal xref">B.3</a>. <a href="#name-draft-sheffer-oauth-rfc8725b" class="internal xref">draft-sheffer-oauth-rfc8725bis-01</a></p> |
| 1330 | + <p id="section-toc.1-1.9.2.3.1"><a href="#appendix-B.3" class="auto internal xref">B.3</a>. <a href="#name-draft-sheffer-oauth-rfc8725" class="internal xref">draft-sheffer-oauth-rfc8725bis-02</a></p> |
1332 | 1331 | </li> |
1333 | 1332 | <li class="compact toc ulBare ulEmpty" id="section-toc.1-1.9.2.4"> |
1334 | | - <p id="section-toc.1-1.9.2.4.1"><a href="#appendix-B.4" class="auto internal xref">B.4</a>. <a href="#name-draft-sheffer-oauth-rfc8725bi" class="internal xref">draft-sheffer-oauth-rfc8725bis-00</a></p> |
| 1333 | + <p id="section-toc.1-1.9.2.4.1"><a href="#appendix-B.4" class="auto internal xref">B.4</a>. <a href="#name-draft-sheffer-oauth-rfc8725b" class="internal xref">draft-sheffer-oauth-rfc8725bis-01</a></p> |
| 1334 | +</li> |
| 1335 | + <li class="compact toc ulBare ulEmpty" id="section-toc.1-1.9.2.5"> |
| 1336 | + <p id="section-toc.1-1.9.2.5.1"><a href="#appendix-B.5" class="auto internal xref">B.5</a>. <a href="#name-draft-sheffer-oauth-rfc8725bi" class="internal xref">draft-sheffer-oauth-rfc8725bis-00</a></p> |
1335 | 1337 | </li> |
1336 | 1338 | </ul> |
1337 | 1339 | </li> |
@@ -2140,62 +2142,77 @@ <h2 id="name-document-history"> |
2140 | 2142 | <a href="#appendix-B" class="section-number selfRef">Appendix B. </a><a href="#name-document-history" class="section-name selfRef">Document History</a> |
2141 | 2143 | </h2> |
2142 | 2144 | <p id="appendix-B-1">[[Note to RFC Editor: please remove before publication.]]<a href="#appendix-B-1" class="pilcrow">¶</a></p> |
2143 | | -<div id="autogen-draft-ietf-oauth-rfc8725bis-00"> |
| 2145 | +<div id="autogen-draft-ietf-oauth-rfc8725bis-01"> |
2144 | 2146 | <section id="appendix-B.1"> |
2145 | 2147 | <h3 id="name-draft-ietf-oauth-rfc8725bis"> |
2146 | | -<a href="#appendix-B.1" class="section-number selfRef">B.1. </a><a href="#name-draft-ietf-oauth-rfc8725bis" class="section-name selfRef">draft-ietf-oauth-rfc8725bis-00</a> |
| 2148 | +<a href="#appendix-B.1" class="section-number selfRef">B.1. </a><a href="#name-draft-ietf-oauth-rfc8725bis" class="section-name selfRef">draft-ietf-oauth-rfc8725bis-01</a> |
2147 | 2149 | </h3> |
2148 | 2150 | <ul class="normal"> |
2149 | 2151 | <li class="normal" id="appendix-B.1-1.1"> |
2150 | | - <p id="appendix-B.1-1.1.1">Draft adopted, no textual changes<a href="#appendix-B.1-1.1.1" class="pilcrow">¶</a></p> |
| 2152 | + <p id="appendix-B.1-1.1.1">Applied editorial suggestions by Dan Moore.<a href="#appendix-B.1-1.1.1" class="pilcrow">¶</a></p> |
| 2153 | +</li> |
| 2154 | + <li class="normal" id="appendix-B.1-1.2"> |
| 2155 | + <p id="appendix-B.1-1.2.1">Described changes relative to RFC 8725<a href="#appendix-B.1-1.2.1" class="pilcrow">¶</a></p> |
2151 | 2156 | </li> |
2152 | 2157 | </ul> |
2153 | 2158 | </section> |
2154 | 2159 | </div> |
2155 | | -<div id="autogen-draft-sheffer-oauth-rfc8725bis-02"> |
| 2160 | +<div id="autogen-draft-ietf-oauth-rfc8725bis-00"> |
2156 | 2161 | <section id="appendix-B.2"> |
2157 | | - <h3 id="name-draft-sheffer-oauth-rfc8725"> |
2158 | | -<a href="#appendix-B.2" class="section-number selfRef">B.2. </a><a href="#name-draft-sheffer-oauth-rfc8725" class="section-name selfRef">draft-sheffer-oauth-rfc8725bis-02</a> |
| 2162 | + <h3 id="name-draft-ietf-oauth-rfc8725bis-"> |
| 2163 | +<a href="#appendix-B.2" class="section-number selfRef">B.2. </a><a href="#name-draft-ietf-oauth-rfc8725bis-" class="section-name selfRef">draft-ietf-oauth-rfc8725bis-00</a> |
2159 | 2164 | </h3> |
2160 | 2165 | <ul class="normal"> |
2161 | 2166 | <li class="normal" id="appendix-B.2-1.1"> |
2162 | | - <p id="appendix-B.2-1.1.1">Obsoletes RFC 8725 and updates RFC 7519.<a href="#appendix-B.2-1.1.1" class="pilcrow">¶</a></p> |
| 2167 | + <p id="appendix-B.2-1.1.1">Draft adopted, no textual changes<a href="#appendix-B.2-1.1.1" class="pilcrow">¶</a></p> |
2163 | 2168 | </li> |
2164 | 2169 | </ul> |
2165 | 2170 | </section> |
2166 | 2171 | </div> |
2167 | | -<div id="autogen-draft-sheffer-oauth-rfc8725bis-01"> |
| 2172 | +<div id="autogen-draft-sheffer-oauth-rfc8725bis-02"> |
2168 | 2173 | <section id="appendix-B.3"> |
2169 | | - <h3 id="name-draft-sheffer-oauth-rfc8725b"> |
2170 | | -<a href="#appendix-B.3" class="section-number selfRef">B.3. </a><a href="#name-draft-sheffer-oauth-rfc8725b" class="section-name selfRef">draft-sheffer-oauth-rfc8725bis-01</a> |
| 2174 | + <h3 id="name-draft-sheffer-oauth-rfc8725"> |
| 2175 | +<a href="#appendix-B.3" class="section-number selfRef">B.3. </a><a href="#name-draft-sheffer-oauth-rfc8725" class="section-name selfRef">draft-sheffer-oauth-rfc8725bis-02</a> |
2171 | 2176 | </h3> |
2172 | 2177 | <ul class="normal"> |
2173 | 2178 | <li class="normal" id="appendix-B.3-1.1"> |
2174 | | - <p id="appendix-B.3-1.1.1">Mitigate encryption-signature confusion.<a href="#appendix-B.3-1.1.1" class="pilcrow">¶</a></p> |
| 2179 | + <p id="appendix-B.3-1.1.1">Obsoletes RFC 8725 and updates RFC 7519.<a href="#appendix-B.3-1.1.1" class="pilcrow">¶</a></p> |
| 2180 | +</li> |
| 2181 | + </ul> |
| 2182 | +</section> |
| 2183 | +</div> |
| 2184 | +<div id="autogen-draft-sheffer-oauth-rfc8725bis-01"> |
| 2185 | +<section id="appendix-B.4"> |
| 2186 | + <h3 id="name-draft-sheffer-oauth-rfc8725b"> |
| 2187 | +<a href="#appendix-B.4" class="section-number selfRef">B.4. </a><a href="#name-draft-sheffer-oauth-rfc8725b" class="section-name selfRef">draft-sheffer-oauth-rfc8725bis-01</a> |
| 2188 | + </h3> |
| 2189 | +<ul class="normal"> |
| 2190 | +<li class="normal" id="appendix-B.4-1.1"> |
| 2191 | + <p id="appendix-B.4-1.1.1">Mitigate encryption-signature confusion.<a href="#appendix-B.4-1.1.1" class="pilcrow">¶</a></p> |
2175 | 2192 | </li> |
2176 | | - <li class="normal" id="appendix-B.3-1.2"> |
2177 | | - <p id="appendix-B.3-1.2.1">Reject unreasonably large <code>p2c</code> (PBES2 Count) values.<a href="#appendix-B.3-1.2.1" class="pilcrow">¶</a></p> |
| 2193 | + <li class="normal" id="appendix-B.4-1.2"> |
| 2194 | + <p id="appendix-B.4-1.2.1">Reject unreasonably large <code>p2c</code> (PBES2 Count) values.<a href="#appendix-B.4-1.2.1" class="pilcrow">¶</a></p> |
2178 | 2195 | </li> |
2179 | | - <li class="normal" id="appendix-B.3-1.3"> |
2180 | | - <p id="appendix-B.3-1.3.1">Defensive checking to address incorrect reading of <code>alg</code> values as being case-insensitive.<a href="#appendix-B.3-1.3.1" class="pilcrow">¶</a></p> |
| 2196 | + <li class="normal" id="appendix-B.4-1.3"> |
| 2197 | + <p id="appendix-B.4-1.3.1">Defensive checking to address incorrect reading of <code>alg</code> values as being case-insensitive.<a href="#appendix-B.4-1.3.1" class="pilcrow">¶</a></p> |
2181 | 2198 | </li> |
2182 | | - <li class="normal" id="appendix-B.3-1.4"> |
2183 | | - <p id="appendix-B.3-1.4.1">Mitigate DoS attacks resulting from abuse of compression.<a href="#appendix-B.3-1.4.1" class="pilcrow">¶</a></p> |
| 2199 | + <li class="normal" id="appendix-B.4-1.4"> |
| 2200 | + <p id="appendix-B.4-1.4.1">Mitigate DoS attacks resulting from abuse of compression.<a href="#appendix-B.4-1.4.1" class="pilcrow">¶</a></p> |
2184 | 2201 | </li> |
2185 | | - <li class="normal" id="appendix-B.3-1.5"> |
2186 | | - <p id="appendix-B.3-1.5.1">Mitigate JWT serialization format confusion.<a href="#appendix-B.3-1.5.1" class="pilcrow">¶</a></p> |
| 2202 | + <li class="normal" id="appendix-B.4-1.5"> |
| 2203 | + <p id="appendix-B.4-1.5.1">Mitigate JWT serialization format confusion.<a href="#appendix-B.4-1.5.1" class="pilcrow">¶</a></p> |
2187 | 2204 | </li> |
2188 | 2205 | </ul> |
2189 | 2206 | </section> |
2190 | 2207 | </div> |
2191 | 2208 | <div id="autogen-draft-sheffer-oauth-rfc8725bis-00"> |
2192 | | -<section id="appendix-B.4"> |
| 2209 | +<section id="appendix-B.5"> |
2193 | 2210 | <h3 id="name-draft-sheffer-oauth-rfc8725bi"> |
2194 | | -<a href="#appendix-B.4" class="section-number selfRef">B.4. </a><a href="#name-draft-sheffer-oauth-rfc8725bi" class="section-name selfRef">draft-sheffer-oauth-rfc8725bis-00</a> |
| 2211 | +<a href="#appendix-B.5" class="section-number selfRef">B.5. </a><a href="#name-draft-sheffer-oauth-rfc8725bi" class="section-name selfRef">draft-sheffer-oauth-rfc8725bis-00</a> |
2195 | 2212 | </h3> |
2196 | 2213 | <ul class="normal"> |
2197 | | -<li class="normal" id="appendix-B.4-1.1"> |
2198 | | - <p id="appendix-B.4-1.1.1">Initial version, text is identical to RFC 8725.<a href="#appendix-B.4-1.1.1" class="pilcrow">¶</a></p> |
| 2214 | +<li class="normal" id="appendix-B.5-1.1"> |
| 2215 | + <p id="appendix-B.5-1.1.1">Initial version, text is identical to RFC 8725.<a href="#appendix-B.5-1.1.1" class="pilcrow">¶</a></p> |
2199 | 2216 | </li> |
2200 | 2217 | </ul> |
2201 | 2218 | </section> |
|
0 commit comments