The Most Addictive Python and SQL Courses
Power BI Fundamentals - Create visualizations and dashboards from scratch
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This talk traces the history of proof of possession in OAuth and explains two current approaches to sender-constraining access tokens, including mutual TLS.
Syllabus
Intro
OAuth
Proof of Possession before OAuth
OAuth 10 version 1
OAuth 10 version 2
New OAuth hashtag
The last passing gift
OAuth Proof of Possession
OAuth Token Binding
The Industry Jumps In
OAuth 20 Mutual TLS
Mutual TLS
Mutual TLS in practice
CNF token
Client certificate
Summary
Fast forwarding
Token request
Proof token
Access token
Resource access
Json token
Token hash
Demo
The downside of Depop
Questions
Taught by
NDC Conferences