The IESG has received a request from the Javascript Object Signing and Encryption WG (jose) to consider the following document: 'JOSE: Deprecate 'none' and 'RSA1_5'' <draft-ietf-jose-deprecate-none-rsa15-06.txt> as Proposed Standard
The IESG plans to make a decision on this document in the coming weeks, and solicits last-call comments. Please send substantive comments to the [email protected] mailing list, with [email protected] copied, no later than 2026-10-09. Please retain the beginning of the Subject line to facilitate automated sorting. Abstract This document updates RFC 7518 to deprecate the JWS algorithm "none" and the JWE algorithm "RSA1_5". These algorithms have known security weaknesses. It also updates the Review Instructions for Designated Experts to establish baseline security requirements that future algorithm registrations are expected to meet. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-jose-deprecate-none-rsa15/ No IPR declarations have been submitted directly on this I-D. _______________________________________________ IETF-Announce mailing list -- [email protected] To unsubscribe send an email to [email protected]
