DPoP-inspired vs Message Signatures

[arndt-s]

Creating a reference-able & umbrella issue for the choice between the DPoP-inspired and the HTTP Message Signatures approach.

Section 1:

For application-level protection we currently propose two alternative solutions, one inspired by DPoP [RFC9449] in Section 4.2 and one which is a profile of HTTP Message Signatures [RFC9421] in Section 4.3. The design team believes that we need to pick one of these two alternatives for standardization, once we have understood their pros and cons.