Normative/Informative reference split

Author: PieterKas

draft-ietf-oauth-cross-device-security.md

@@ -976,6 +976,7 @@ The authors would like to thank Tim Cappalli, Nick Ludwig, Adrian Frei, Nikhil R
    *  Initial draft adopted from document circulated to the OAuth Security Workshop Slack Channel
    *  Upload as draft-ietf-oauth-cross-device-security-best-practice-00
 
+<references title="Normative References">
 <reference anchor="OpenID.Core" target="http://openid.net/specs/openid-connect-core-1_0.html">
   <front>
     <title>OpenID Connect Core 1.0</title>
@@ -997,7 +998,10 @@ The authors would like to thank Tim Cappalli, Nick Ludwig, Adrian Frei, Nikhil R
     <date year="2014" month="November"/>
   </front>
 </reference>
+<references>
 
+
+<references title="Informative References">
 <reference anchor="CIBA" target="https://openid.net/specs/openid-client-initiated-backchannel-authentication-core-1_0.html">
   <front>
     <title>OpenID Connect Client-Initiated Backchannel Authentication Flow - Core 1.0</title>
@@ -1288,3 +1292,4 @@ The authors would like to thank Tim Cappalli, Nick Ludwig, Adrian Frei, Nikhil R
  <date year="2025" month="January"/>
  </front>
 </reference>
+<references>