draft-ietf-oauth-selective-disclosure-jwt-17 - Selective Disclosure for JWTs (SD-JWT)

This specification defines a mechanism for the selective disclosure of individual elements of a JSON-encoded data structure used as the payload of a JSON Web Signature (JWS). The primary use case is the selective disclosure of JSON Web Token (JWT) claims.

RFC 9901 - Selective Disclosure for JSON Web Tokens Skip to main content Selective Disclosure for JSON Web Tokens RFC 9901 Status Email expansions History Document Type RFC - Proposed Standard (November 2025) Was draft-ietf-oauth-selective-disclosure-jwt ( oauth WG ) Authors D. Fett , K. Yasuda , B. Campbell Last updated 2026-05-20 RFC stream Internet Engineering Task Force (IETF) Formats txt html xml pdf htmlized bibtex Additional resources Mailing list discussion IESG Responsible AD Deb Cooley Send notices to (None) Email authors Email WG IPR References Referenced by Get editor source Search

related reading

• What are JWT, JWS, JWE, JWK, and JWA?loginradius.com
• RFC 7800 - Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)datatracker.ietf.org
• What is Private Key JWT: Deep dive into asymmetric client authentication — WorkOSworkos.com
• Security incident disclosure — July 2026huggingface.co
• OpenAI Platformplatform.openai.com
• ZK Emailprove.email
• JWT should not be your default for sessionsevertpot.com
• GitHub - MystenLabs/seal: Seal is a decentralized secrets management (DSM) service that relies on access control policies defined and validated on Sui.github.com
• thesis.pdfaayushg.com
• No Phone Home statement by ACLU, EFF, Brave, CDT, etc. from Matteo Frigo on 2025-06-05 (public-credentials@w3.org from June 2025)lists.w3.org
• Decentralized Identifiers (DIDs) v1.0w3.org
• Soulbound Tokens (SBTs) Should Be Signed Claimskatelynsills.com