[Openid-specs-ab] Key-binding and dpop scope

george at practicalidentity.com george at practicalidentity.com
Fri Aug 29 14:39:47 UTC 2025


Hi, 

Would it make sense to change the scope name identified in the key-binding spec from something specific like ‘dpop’ to something more generic? e.g. ‘id_token_kb’ ? Or maybe just make clearer that the RP is looking for key bound tokens? e.g. ‘dpop_kb’? I just worry that ‘dpop’ by itself does not communicate the intended behavior.

Thoughts?

George Fletcher
Identity Standards Architect
Practical Identity LLC



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20250829/8b10a200/attachment.htm>


More information about the Openid-specs-ab mailing list