| 9999 | Remote ATtestation procedureS (RATS) Conceptual Message Wrapper (CMW)H. Birkholz, N. Smith, T. Fossati, H. Tschofenig | Proposed Standard | July 2026 |
| 9967 | System for Cross-Domain Identity Management (SCIM) Profile for Security Event Tokens (SETs)P. Hunt, Ed., N. Cam-Winget, M. Kiser, J. Schreiber | Proposed Standard | May 2026 |
| 9964 | ML-DSA for JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE)M. Prorock, O. Steele | Proposed Standard | May 2026 |
| 9932 | Mutually Authenticating TLS in the Context of FederationsS. Halén, J. Schlyter | Informational | April 2026 |
| 9901 | Selective Disclosure for JSON Web TokensD. Fett, K. Yasuda, B. Campbell | Proposed Standard | November 2025 |
| 9770 | Notification of Revoked Access Tokens in the Authentication and Authorization for Constrained Environments (ACE) FrameworkM. Tiloca, F. Palombini, S. Echeverria, G. Lewis | Proposed Standard | June 2025 |
| 9749 | Use of Voluntary Application Server Identification (VAPID) in JSON Meta Application Protocol (JMAP) Web PushD. Gultsch | Proposed Standard | March 2025 |
| 9728 | OAuth 2.0 Protected Resource MetadataM.B. Jones, P. Hunt, A. Parecki | Proposed Standard | April 2025 |
| 9711 | The Entity Attestation Token (EAT)L. Lundblade, G. Mandyam, J. O'Donoghue, C. Wallace | Proposed Standard | April 2025 |
| 9701 | JSON Web Token (JWT) Response for OAuth Token IntrospectionT. Lodderstedt, Ed., V. Dzhuvinov | Proposed Standard | January 2025 |
| 9679 | CBOR Object Signing and Encryption (COSE) Key ThumbprintK. Isobe, H. Tschofenig, O. Steele | Proposed Standard | December 2024 |
| 9635 | Grant Negotiation and Authorization Protocol (GNAP)J. Richer, Ed., F. Imbault | Proposed Standard | October 2024 |
| 9596 | CBOR Object Signing and Encryption (COSE) "typ" (type) Header ParameterM.B. Jones, O. Steele | Proposed Standard | June 2024 |
| 9509 | X.509 Certificate Extended Key Usage (EKU) for 5G Network FunctionsT. Reddy.K, J. Ekman, D. Migault | Proposed Standard | March 2024 |
| 9493 | Subject Identifiers for Security Event TokensA. Backman, Ed., M. Scurtescu, P. Jain | Proposed Standard | December 2023 |
| 9449 | OAuth 2.0 Demonstrating Proof of Possession (DPoP)D. Fett, B. Campbell, J. Bradley, T. Lodderstedt, M. Jones, D. Waite | Proposed Standard | September 2023 |
| 9448 | TNAuthList Profile of Automated Certificate Management Environment (ACME) Authority TokenC. Wendt, D. Hancock, M. Barnes, J. Peterson | Proposed Standard | September 2023 |
| 9447 | Automated Certificate Management Environment (ACME) Challenges Using an Authority TokenJ. Peterson, M. Barnes, D. Hancock, C. Wendt | Proposed Standard | September 2023 |
| 9421 | HTTP Message SignaturesA. Backman, Ed., J. Richer, Ed., M. Sporny | Proposed Standard | February 2024 |
| 9321 | Signature Validation TokenS. Santesson, R. Housley | Informational | October 2022 |
| 9101 | The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)N. Sakimura, J. Bradley, M. Jones | Proposed Standard | August 2021 |
| 9068 | JSON Web Token (JWT) Profile for OAuth 2.0 Access TokensV. Bertocci | Proposed Standard | October 2021 |
| 9052 | CBOR Object Signing and Encryption (COSE): Structures and ProcessJ. Schaad | Internet Standard | August 2022 |
| 8936 | Poll-Based Security Event Token (SET) Delivery Using HTTPA. Backman, Ed., M. Jones, Ed., M. Scurtescu, M. Ansari, A. Nadalin | Proposed Standard | November 2020 |
| 8935 | Push-Based Security Event Token (SET) Delivery Using HTTPA. Backman, Ed., M. Jones, Ed., M. Scurtescu, M. Ansari, A. Nadalin | Proposed Standard | November 2020 |
| 8812 | CBOR Object Signing and Encryption (COSE) and JSON Object Signing and Encryption (JOSE) Registrations for Web Authentication (WebAuthn) AlgorithmsM. Jones | Proposed Standard | August 2020 |
| 8785 | JSON Canonicalization Scheme (JCS)A. Rundgren, B. Jordan, S. Erdtman | Informational | June 2020 |
| 8747 | Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs)M. Jones, L. Seitz, G. Selander, S. Erdtman, H. Tschofenig | Proposed Standard | March 2020 |
| 8725 | JSON Web Token Best Current PracticesY. Sheffer, D. Hardt, M. Jones | Best Current Practice | February 2020 |
| 8688 | A Session Initiation Protocol (SIP) Response Code for Rejected CallsE.W. Burger, B. Nagda | Proposed Standard | December 2019 |
| 8613 | Object Security for Constrained RESTful Environments (OSCORE)G. Selander, J. Mattsson, F. Palombini, L. Seitz | Proposed Standard | July 2019 |
| 8591 | SIP-Based Messaging with S/MIMEB. Campbell, R. Housley | Proposed Standard | April 2019 |
| 8576 | Internet of Things (IoT) Security: State of the Art and ChallengesO. Garcia-Morchon, S. Kumar, M. Sethi | Informational | April 2019 |
| 8555 | Automatic Certificate Management Environment (ACME)R. Barnes, J. Hoffman-Andrews, D. McCarney, J. Kasten | Proposed Standard | March 2019 |
| 8417 | Security Event Token (SET)P. Hunt, Ed., M. Jones, W. Denniss, M. Ansari | Proposed Standard | July 2018 |
| 8414 | OAuth 2.0 Authorization Server MetadataM. Jones, N. Sakimura, J. Bradley | Proposed Standard | June 2018 |
| 8392 | CBOR Web Token (CWT)M. Jones, E. Wahlstroem, S. Erdtman, H. Tschofenig | Proposed Standard | May 2018 |
| 8387 | Practical Considerations and Implementation Experiences in Securing Smart Object NetworksM. Sethi, J. Arkko, A. Keranen, H. Back | Informational | May 2018 |
| 8322 | Resource-Oriented Lightweight Information Exchange (ROLIE)J. Field, S. Banghart, D. Waltermire | Proposed Standard | February 2018 |
| 8292 | Voluntary Application Server Identification (VAPID) for Web PushM. Thomson, P. Beverloo | Proposed Standard | November 2017 |
| 8230 | Using RSA Algorithms with CBOR Object Signing and Encryption (COSE) MessagesM. Jones | Proposed Standard | September 2017 |
| 8225 | PASSporT: Personal Assertion TokenC. Wendt, J. Peterson | Proposed Standard | February 2018 |
| 8224 | Authenticated Identity Management in the Session Initiation Protocol (SIP)J. Peterson, C. Jennings, E. Rescorla, C. Wendt | Proposed Standard | February 2018 |
| 8152 | CBOR Object Signing and Encryption (COSE)J. Schaad · obsoleted by RFC 9052, RFC 9053 | Proposed Standard | July 2017 |
| 8055 | Session Initiation Protocol (SIP) Via Header Field Parameter to Indicate Received RealmC. Holmberg, Y. Jiang | Proposed Standard | January 2017 |
| 8037 | CFRG Elliptic Curve Diffie-Hellman (ECDH) and Signatures in JSON Object Signing and Encryption (JOSE)I. Liusvaara | Proposed Standard | January 2017 |
| 7951 | JSON Encoding of Data Modeled with YANGL. Lhotka | Proposed Standard | August 2016 |
| 7797 | JSON Web Signature (JWS) Unencoded Payload OptionM. Jones | Proposed Standard | February 2016 |
| 7638 | JSON Web Key (JWK) ThumbprintM. Jones, N. Sakimura | Proposed Standard | September 2015 |
| 7635 | Session Traversal Utilities for NAT (STUN) Extension for Third-Party AuthorizationT. Reddy, P. Patil, R. Ravindranath, J. Uberti | Proposed Standard | August 2015 |
| 7591 | OAuth 2.0 Dynamic Client Registration ProtocolJ. Richer, Ed., M. Jones, J. Bradley, M. Machulak, P. Hunt | Proposed Standard | July 2015 |
| 7520 | Examples of Protecting Content Using JSON Object Signing and Encryption (JOSE)M. Miller | Informational | May 2015 |
| 7519 | JSON Web Token (JWT)M. Jones, J. Bradley, N. Sakimura | Proposed Standard | May 2015 |
| 7518 | JSON Web Algorithms (JWA)M. Jones | Proposed Standard | May 2015 |
| 7517 | JSON Web Key (JWK)M. Jones | Proposed Standard | May 2015 |
| 7516 | JSON Web Encryption (JWE)M. Jones, J. Hildebrand | Proposed Standard | May 2015 |