%% You should probably cite draft-mandyam-tokbind-attest-07 instead of this revision. @techreport{mandyam-tokbind-attest-01, number = {draft-mandyam-tokbind-attest-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-mandyam-tokbind-attest/01/}, author = {Giridhar Mandyam and Laurence Lundblade and Jon Azen}, title = {{Attested TLS Token Binding}}, pagetotal = 5, year = 2017, month = mar, day = 7, abstract = {Token binding allows HTTP servers to bind bearer tokens to TLS connections. In order to do this, clients or user agents must prove possession of a private key. However, proof-of-possession of a private key becomes truly meaningful to a server when accompanied by an attestation statement. This specification describes extensions to the existing token binding protocol to allow for attestation statements to be sent along with the related token binding messages.}, }