From e22ca3819ed3fc5ce6b58b289c6c4b5a16dc8f25 Mon Sep 17 00:00:00 2001
From: Vivien Kraus <vivien@planete-kraus.eu>
Date: Wed, 1 Jan 2020 00:00:00 +0100
Subject: Add a function to hash a public key for DPoP.

---
 NEWS | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'NEWS')

diff --git a/NEWS b/NEWS
index 63f11c7..9c2eb24 100644
--- a/NEWS
+++ b/NEWS
@@ -14,7 +14,10 @@ In order to avoid leaking the private components of a key, the
 =strip-key= function keeps only the required parts.
 ** Hash some data
 The function =hash= takes a string, and hashes its UTF-8 encoding.
-
+** Hash a key
+In DPoP, the identity provider hashes the client's key in the access
+token so that resource servers can verify that the client uses the
+correct key.
 # Local Variables:
 # mode: org
 # End:
-- 
cgit v1.2.3