AMWA NMOS API Security Recommendations

This repository is used to document best practice and recommendations, as produced by AMWA's API Security group. We are looking at confidentiality, identification, integrity, authentication and authorization for AMWA NMOS APIs.

Our approach is based on TLS 1.2/1.3, X.509 PKI, OAuth 2.0 and JSON Web Tokens.

Documentation

• AMWA BCP-003-01: Securing communications in NMOS APIs
• future BCP-003-02: Authorization for NMOS APIs
• work in progress: Automated TLS Certificate Provisioning for NMOS APIs
• Initial Security Proposal (for info only)