OpenPubkey: Augmenting OpenID Connect with User held Signing Keys

ePrint Report: OpenPubkey: Augmenting OpenID Connect with User held Signing Keys

Ethan Heilman, Lucie Mugnier, Athanasios Filippidis, Sharon Goldberg, Sebastien Lipman, Yuval Marcus, Mike Milano, Sidhartha Premkumar, Chad Unrein

OpenPubkey makes a client-side modification to OpenID Connect so that an ID Token issued by an OpenID Provider commits to a user held public key. This transforms an ID Token into a certificate that cryptographically binds an OpenID Connect identity to a public key. We call such an ID Token, a …

certificate chad client client-side connect eprint report identity key keys marcus modification openid openid connect public public key report signing token