%% You should probably cite rfc8747 instead of this I-D. @techreport{ietf-ace-cwt-proof-of-possession-00, number = {draft-ietf-ace-cwt-proof-of-possession-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-ace-cwt-proof-of-possession/00/}, author = {Michael B. Jones and Ludwig Seitz and Göran Selander and Erik Wahlstroem and Samuel Erdtman and Hannes Tschofenig}, title = {{Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs)}}, pagetotal = 13, year = ** No value found for 'doc.pub_date.year' **, month = ** No value found for 'doc.pub_date' **, day = ** No value found for 'doc.pub_date.day' **, abstract = {This specification describes how to declare in a CBOR Web Token (CWT) that the presenter of the CWT possesses a particular proof-of- possession key. Being able to prove possession of a key is also sometimes described as the presenter being a holder-of-key. This specification provides equivalent functionality to "Proof-of- Possession Key Semantics for JSON Web Tokens (JWTs)" (RFC 7800), but using CBOR and CWTs rather than JSON and JWTs.}, }