draft ietf oauth attestation based client auth 11 OAuth 2.0 Attestation Based Client Authentication
Attestation is evidence about a client instance. It does not alone establish a legitimate delegation or the approval required for a particular consequential action.
Attestation is evidence about a client instance. It does not alone establish a legitimate delegation or the approval required for a particular consequential action.
What the source establishes
The attestation based client authentication draft proposes key bound attestations for a client instance interacting with authorization or resource servers, without revealing the target audience to the attester.
Moona assessment and evidence limits
Attestation is evidence about a client instance. It does not alone establish a legitimate delegation or the approval required for a particular consequential action.
Verification scope
Moona reviewed the retained source on 29 September 2026. Source acquisition and review establish provenance for this account; they do not reproduce an experiment, validate a vendor deployment or authorize an action.
Sources
This analysis interprets third-party reporting, research and announcements. Moona is not the original reporter of the underlying events.