{
  "draft": "draft-ietf-oauth-cross-device-security-16",
  "doc_id": "RFC10027",
  "title": "Best Current Practice for Security of Cross-Device Flows",
  "authors": [
    "P. Kasselman",
    "D. Fett",
    "F. Skokan"
  ],
  "format": [
    "XML",
    "TEXT",
    "HTML",
    "PDF"
  ],
  "page_count": "50",
  "pub_status": "BEST CURRENT PRACTICE",
  "status": "BEST CURRENT PRACTICE",
  "source": "Web Authorization Protocol",
  "abstract": "This document describes threats against cross-device flows along with practical mitigations, protocol selection guidance, and a summary of formal analysis results identified as relevant to the security of cross-device flows. It serves as a security guide to system designers, architects, product managers, security specialists, fraud analysts, and engineers implementing cross-device flows.",
  "pub_date": "August 2026",
  "keywords": [
    "security",
    "oauth2"
  ],
  "obsoletes": [],
  "obsoleted_by": [],
  "updates": [],
  "updated_by": [],
  "see_also": [],
  "doi": "10.17487/RFC10027",
  "errata_url": null
}