[Openid-specs-fapi] Issue #747: recommendations around handling of private keys etc Create issue for deployment advice. (openid/fapi)

[Nat]

New issue 747: recommendations around handling of private keys etc Create issue for deployment advice.
https://bitbucket.org/openid/fapi/issues/747/recommendations-around-handling-of-private

Nat Sakimura:

Related to [https://bitbucket.org/openid/fapi/issues/746/recommendations-around-handling-of-private](https://bitbucket.org/openid/fapi/issues/746/recommendations-around-handling-of-private)

Several people have said to me that they’re surprised FAPI doesn’t have recommendations on storage of private keys etc. I think it’s technically out of scope but maybe we should say that more explicitly and refer people to something like NIST.SP.800-57pt1r5.

‌