Draft -03
·
2 commits
to main
since this release
- Prohibit all forms of symmetric client authentication, not just client secret
- Added recommendations for development when clients are not on the web
- Added reference to HTTP Caching RFC9111
- Added security considerations around domain trust and changes in client keys
- Updated references