This is an OPS-DIR review of JWK Thumbprint URI (draft-ietf-oauth-jwk-thumbprint-uri). This document is well written and clearly defines the technology. one nit – I do not see a need for section 2 (Requirements Notation and Conventions) since the capitalized terms are not used in the document. One place that a MUST could be used is in section 5 (Mandatory to Implement Hash Algorithm) and it might be useful to do so since some implementation checklists that I have seen key off of the RFC 2119 capitalized terms but, that said, the language in the current document is very clear.