Last Call: <draft-ietf-jose-deprecate-none-rsa15-06.txt> (JOSE: Deprecate 'none' and 'RSA1_5') to Proposed Standard
The IESG <iesg-secretary@ietf.org> Fri, 25 September 2026 16:48 UTC
Received: by mx.ietf.org (Postfix) id 0810430; Fri, 25 Sep 2026 16:48:52 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ietf.org; s=mail; t=1790354932; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc: mime-version:mime-version:mime-version: content-type:content-type:content-type: content-transfer-encoding:content-transfer-encoding:content-transfer-encoding; bh=jG03Z1ZCvMSuNNFXu+ZEpjRg9Ng88gw1PGw5+RmTxt0=; b=nJE/wDXIUcRgTliZod1pYZutinmBVe8eP+jNsQCOl9AytCd0lHpb//xy40pGFF2haLOeaM ixQ2jRmsGbMVfLwXc0A3H2kdEQiZgsYp1wSa8Gatb/F5ObRRxqYvpiefypIWUVK0/B0iB6 i4+yX9atRTNbdRwgxEC7W4DxCPS2yvs=
Authentication-Results: ORIGINATING; auth=pass smtp.auth=mail2@ietf.org smtp.mailfrom=iesg-secretary@ietf.org
Received: from [10.244.9.165] (gaia.k8s.ietf.org [4.156.85.76]) by mail2.ietf.org (Postfix) with ESMTP id CA184139CE784; Fri, 25 Sep 2026 09:48:51 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Last Call: <draft-ietf-jose-deprecate-none-rsa15-06.txt> (JOSE: Deprecate 'none' and 'RSA1_5') to Proposed Standard
X-Test-IDTracker: no
X-IETF-IDTracker: 12.78.0
Auto-Submitted: auto-generated
Precedence: bulk
Sender: iesg-secretary@ietf.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <179035493172.92015.2579833377476010001@dt-datatracker-57df95fc99-fzjcz>
Date: Fri, 25 Sep 2026 09:48:51 -0700
Message-ID-Hash: B3BAKUAEW7X5A2CRJ3HPVYWHO4RKPXQE
X-Message-ID-Hash: B3BAKUAEW7X5A2CRJ3HPVYWHO4RKPXQE
X-MailFrom: iesg-secretary@ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-ietf-announce.ietf.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: draft-ietf-jose-deprecate-none-rsa15@ietf.org, jose-chairs@ietf.org, jose@ietf.org, kodonog@pobox.com
X-Mailman-Version: 3.3.10
Reply-To: last-call@ietf.org, jose@ietf.org
List-Id: "IETF announcement list. No discussions." <ietf-announce.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/K6V_8PFYvdLbn1b9IybkD-A1tAg>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf-announce>
List-Help: <mailto:ietf-announce-request@ietf.org?subject=help>
List-Owner: <mailto:ietf-announce-owner@ietf.org>
List-Post: <mailto:ietf-announce@ietf.org>
List-Subscribe: <mailto:ietf-announce-join@ietf.org>
List-Unsubscribe: <mailto:ietf-announce-leave@ietf.org>
The IESG has received a request from the Javascript Object Signing and Encryption WG (jose) to consider the following document: 'JOSE: Deprecate 'none' and 'RSA1_5'' <draft-ietf-jose-deprecate-none-rsa15-06.txt> as Proposed Standard The IESG plans to make a decision on this document in the coming weeks, and solicits last-call comments. Please send substantive comments to the last-call@ietf.org mailing list, with jose@ietf.org copied, no later than 2026-10-09. Please retain the beginning of the Subject line to facilitate automated sorting. Abstract This document updates RFC 7518 to deprecate the JWS algorithm "none" and the JWE algorithm "RSA1_5". These algorithms have known security weaknesses. It also updates the Review Instructions for Designated Experts to establish baseline security requirements that future algorithm registrations are expected to meet. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-jose-deprecate-none-rsa15/ No IPR declarations have been submitted directly on this I-D.