RFC 8417

Security Event Token (SET), July 2018

File formats:
icon for text file icon for PDF icon for HTML
Status:
PROPOSED STANDARD
Authors:
P. Hunt, Ed.
M. Jones
W. Denniss
M. Ansari
Stream:
IETF
Source:
secevent (sec)

Cite this RFC: TXT  |  XML  |   BibTeX

DOI:  https://doi.org/10.17487/RFC8417

Discuss this RFC: Send questions or comments to the mailing list id-event@ietf.org

Other actions: View Errata  |  Submit Errata  |  Find IPR Disclosures from the IETF  |  View History of RFC 8417


Abstract

This specification defines the Security Event Token (SET) data structure. A SET describes statements of fact from the perspective of an issuer about a subject. These statements of fact represent an event that occurred directly to or about a security subject, for example, a statement about the issuance or revocation of a token on behalf of a subject. This specification is intended to enable representing security- and identity-related events. A SET is a JSON Web Token (JWT), which can be optionally signed and/or encrypted. SETs can be distributed via protocols such as HTTP.


For the definition of Status, see RFC 2026.

For the definition of Stream, see RFC 8729.




Advanced Search