Record metadata

type: "Specification"
title: "mTLS-bound tokens — RFC 8705"
description: "Sender-constrains tokens to a client via mutual TLS."
resource: "https://www.rfc-editor.org/rfc/rfc8705"
tags: [oauth, mtls, security]
generated: { by: human:crpage, at: 2026-07-09T09:44:00Z }
status: stable
sources: [{ id: primary, resource: "https://www.rfc-editor.org/rfc/rfc8705" }]

mTLS-bound tokens — RFC 8705

Strong sender constraint; good for confidential clients and service traffic. Operationally heavier (certificates, client auth). Strong for backend agents and high-trust enterprise environments.