Skip to content

Commit 0c0ba30

Browse files
Update src/content/docs/identityserver/tokens/fapi-2-0-specification.md
Co-authored-by: Maarten Balliauw <[email protected]>
1 parent d5c626b commit 0c0ba30

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/content/docs/identityserver/tokens/fapi-2-0-specification.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -190,6 +190,6 @@ builder.Services.ConfigureDPoPTokensForScheme(JwtBearerDefaults.AuthenticationSc
190190

191191
You are now FAPI 2.0 compliant and ready to secure your high-value assets with Duende IdentityServer.
192192

193-
## Private Key JWT vs. MTLS
193+
## Private Key JWT vs. mTLS
194194

195195
While the FAPI 2.0 allows for choice in securing communication between the authorization server and clients, we recommend that developers implementing FAPI 2.0 start with private key JWTs before choosing mTLS. Both are supported with Duende IdentityServer, but [implementing mTLS](/identityserver/tokens/client-authentication.md#mutual-tls-client-certificates) is relatively challenging to maintain in a production environment. You are responsible for your deployment and production environments, so you are ultimately best suited to decide which option to move forward with.

0 commit comments

Comments
 (0)