[Openid-specs-fapi] ACME for Open Banking TPPs

Anders Rundgren anders.rundgren.net at gmail.com
Tue Oct 19 03:41:40 UTC 2021


Hi FAPI'ers,

Maintaining TPP certificates in a convenient and secure manner is paramount for reliable and trustworthy operation.  Since ACME has been a huge success for Web server certificates, the IETF are now looking to other uses as well:
https://datatracker.ietf.org/doc/draft-ietf-acme-client/

If the Open Banking community have any specific requirements, now seems to be the right moment to define those.  On top of my head I could imagine things like:
- Key container attestations
- Domain based challenges

Anders



More information about the Openid-specs-fapi mailing list