Repository navigation

SN/I certificate over mTLS Proof-of-Possession - #938

Draft

Robbie-Microsoft wants to merge 12 commits into

devfrom

rginsburg/sni-mtls-pop

Commits on Jul 7, 2026
- Add SNI certificate support over mTLS Proof-of-Possession
  
  Robbie-Microsoft
  and
  Copilot
  committed
  dd4f13a
Commits on Jul 8, 2026
- Use SN/I-allow-listed app for mTLS PoP e2e tests
  
  Robbie-Microsoft
  and
  Copilot
  committed
  81c3eb7
- Enumerate key-bound ATs on sign-out and account removal
  
  Robbie-Microsoft
  and
  Copilot
  committed
  224a003
- Fail closed on mTLS PoP token_type downgrade; honor verify; lock session build
  
  Robbie-Microsoft
  and
  Copilot
  committed
  02ccacb
- Isolate key/ext-bound ATs unconditionally; normalize verify=None
  
  Robbie-Microsoft
  and
  Copilot
  committed
  51adcec
- Address review comments on mTLS PoP cert/key handling
  
  Robbie-Microsoft
  and
  Copilot
  committed
  ba697e8
Commits on Jul 30, 2026
- Harden mTLS PoP e2e: prove token at resource + naming matrix
  
  Robbie-Microsoft
  and
  Copilot
  committed
  b79166d
- Strengthen X509->Bearer e2e: assert cert binding is absent
  
  Robbie-Microsoft
  and
  Copilot
  committed
  aaf62c1
- Note _call_graph_with_mtls_pop_token is shared with FIC #939
  
  Robbie-Microsoft
  and
  Copilot
  committed
  fec7d7f
- Split mtls_pop/Bearer e2e by region (drop regional PoP cell)
  
  Robbie-Microsoft
  and
  Copilot
  committed
  b9233c6
- Merge origin/dev into sni-mtls-pop (resync #938 with base)
  
  Robbie-Microsoft
  and
  Copilot
  committed
  4ec592f
Commits on Oct 9, 2026
- Merge origin/dev into sni-mtls-pop
  Robbie-Microsoft
  committed
  e226f92

Navigation Menu

Repository navigation

SN/I certificate over mTLS Proof-of-Possession - #938

SN/I certificate over mTLS Proof-of-Possession#938
Robbie-Microsoft wants to merge 12 commits into
devfrom
rginsburg/sni-mtls-pop

Commits on Jul 7, 2026

Add SNI certificate support over mTLS Proof-of-Possession

Commits on Jul 8, 2026

Use SN/I-allow-listed app for mTLS PoP e2e tests

Enumerate key-bound ATs on sign-out and account removal

Fail closed on mTLS PoP token_type downgrade; honor verify; lock session build

Isolate key/ext-bound ATs unconditionally; normalize verify=None

Address review comments on mTLS PoP cert/key handling

Commits on Jul 30, 2026

Harden mTLS PoP e2e: prove token at resource + naming matrix

Strengthen X509->Bearer e2e: assert cert binding is absent

Note _call_graph_with_mtls_pop_token is shared with FIC #939

Split mtls_pop/Bearer e2e by region (drop regional PoP cell)

Merge origin/dev into sni-mtls-pop (resync #938 with base)

Commits on Oct 9, 2026

Merge origin/dev into sni-mtls-pop