draft-ietf-jose-deprecate-none-rsa15

JOSE: Deprecate 'none' and 'RSA1_5'

streamIETF groupjose stateactive pages8 rev04 expires2026-09-03 canonicalhttps://datatracker.ietf.org/doc/draft-ietf-jose-deprecate-none-rsa15/

This document updates [RFC7518] to deprecate the JWS algorithm "none" and the JWE algorithm "RSA1_5". These algorithms have known security weaknesses. It also updates the Review Instructions for Designated Experts to establish baseline security requirements that future algorithm registrations should meet.