There is this sentence in the ECCP section
• Tokens. There is no single standard for the token format. Examples are available in [13] and [14].
[13] DASH-IF Implementation Guidelines:Token-based Access Control for DASH (TAC), February 2019, URL: https://dashif.org/guidelines/
[14] URI Signing for CDN Interconnection (CDNI),R. van Brandenburg,K. Leung,P. Sorber, February 11, 2021, https://tools.ietf.org/html/draft-ietf-cdni-uri-signing-21.
I believe we should update to a reference to the WAVE CAT specification.