[Openid-specs-ab] Call for Adoption for the OpenID Connect Key Binding Specification

Dick Hardt dick.hardt at gmail.com
Mon Oct 6 20:06:58 UTC 2025


On Mon, Oct 6, 2025 at 7:56 PM Andrii Deinega <andrii.deinega at gmail.com>
wrote:

> Dick,
>
> Do you consider a native OAuth client (which helps the ssh utility to
> inject and forward an ID Token) and sshd (which retrieves and handles the
> ID Token) to be two different components of the same RP?
>

This is OpenID Connect, not OAuth, so that is confusing.

Two different components of the same RP is the use case.


>
> If yes... I'm curious whether, in your opinion, the OP should be aware
> that the ID Tokens it issues are actually being forwarded and used
> elsewhere.
>

"used elsewhere" is vague ... Perhaps you can tell me your opinion on the
point you are asking?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20251006/7b6331ec/attachment.htm>


More information about the Openid-specs-ab mailing list