Subject: [OAUTH-WG] Described more of the motivations for the JWK Thumbprint URI specification

From: Mike Jones <[email-masked]>
Date: Thu, 13 Jan 2022 03:41:15 +0000

As requested by the chairs during today's OAuth Virtual Office Hours call, Kristina Yasuda<https://twitter.com/kristinayasuda> and I have updated the JWK Thumbprint URI specification to enhance the description of the motivations for the specification.  In particular, it now describes using JWK Thumbprint URIs as key identifiers that can be syntactically distinguished from other kinds of identifiers also expressed as URIs.  It is used this way in the Self-Issued OpenID Provider v2<https://openid.net/specs/openid-connect-self-issued-v2-1_0.html> specification, for instance.  No normative changes were made.

As discussed on the call, we are requesting that that the chairs use this new draft as the basis for a call for working group adoption.

The specification is available at:

  *   https://www.ietf.org/archive/id/draft-jones-oauth-jwk-thumbprint-uri-01.html

                                                       -- Mike

P.S.  This note was also published at https://self-issued.info/?p=2237 and as @selfissued<https://twitter.com/selfissued/>.