On Tue, Nov 24, 2020 at 2:39 AM Daniel Fett <[email protected]> wrote:

>
> The recommendation could be to use a fresh key pair for each token request.
>
>
 Public clients will have RTs bound so need to use the same key.

-- 
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged 
material for the sole use of the intended recipient(s). Any review, use, 
distribution or disclosure by others is strictly prohibited.  If you have 
received this communication in error, please notify the sender immediately 
by e-mail and delete the message and any file attachments from your 
computer. Thank you._
_______________________________________________
OAuth mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/oauth

Reply via email to