Return-Path: X-Original-To: jose@mail2.ietf.org Delivered-To: jose@mail2.ietf.org Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 52D1611DDA04F; Thu, 23 Jul 2026 22:51:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1784872314; bh=s+7x9VQaOoleC/eLgtkPBHxcZFVRZXnD6zdJP2Tboao=; h=From:To:CC:Subject:Date; b=uv7/2DKY70tgOuYq3gbt2f7ktVnbrRjOVOZQs04wOf2KwlfHc/J5bTq2+GFfMncUk q0Ta0T1NJHjq98hJBOntA/XZa9FxDP7c2qOYKozWkKrW04XkmP+rbtituhslmKnzDV jmw1KBrZsXTLkxgvBCPXi3MNtOuIGcLP1iDEWuNM= X-Virus-Scanned: amavisd-new at ietf.org X-Spam-Flag: NO X-Spam-Score: -2.1 X-Spam-Level: X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_GOV_DKIM_AU=-0.001, HTML_MESSAGE=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=ncsc.gov.uk Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yHCxeuvEX6g9; Thu, 23 Jul 2026 22:51:53 -0700 (PDT) Received: from LO0P265CU003.outbound.protection.outlook.com (mail-uksouthazon11012041.outbound.protection.outlook.com [52.101.96.41]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id DA4C011DDA048; Thu, 23 Jul 2026 22:51:52 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=JE1ZpFHRQ/1z+QRnN6gOzQ2YtZm5WhuZoSfVn8mKXCjGuPlR1YCZYod4ZGKG9Scoi+hi5DprhJ3VlkS5Pv3On7EKWCaIUZNlsdicqsmf8AiW/P7GVdQ8yJ2k5pMqsZ99kxYsdwAtnpRunvMTqC+7D8Jb+5Dbwt/kT7gwsLrSxxYVhLnUccl6fWSG8HXl9hKydpL9sBe6LfEaTK4Yq+YOKW7h72LHeq2K8cn97zxz5RkilqUs7RLKlsy8KfrDOOVPZpQAqZXcPBSPPPsdArNdAcPV5CGVFHQK2DLp9K86vmObaW2WpMeB6fBqcxKezqGx4/rNZaeWZeFzfXYxXvU3Xg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:MIME-Version; bh=6Xtsrn9harU+2KWe0zlKt6blUV5cl3rYGyitSlo7BX8=; b=tfUAE6YlL007L/SK31fCJtrYCiHkF3EIrTru65W68sWpxFMTguQ12JpcM9NGRJyJwiimOSdECRiBUsPpUgfqtjkOwEEkjN0rGgNlXjZOXcyNxj/hHGG/fKY+F/LkDd8vn7rRStAwfIEAE7XOvWVlVzxArzn+asgDUsYk9/TUsX3l2nUGNztwvpz/nNPCDK8FYxgTslCfT1HalwSKjdF3S3W+IqE4mxadFAGKUBgM6oAJk6YcD8PpxyQuHeoalI33U7YFfcVOTy2FlgK0M6Vv/oQfJmbTk7Gv8+NeshGw9+igLF92X4G0Lw7U382Hpal7o5YU9/Qbbv8yCHTPoEhaOA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ncsc.gov.uk; dmarc=pass action=none header.from=ncsc.gov.uk; dkim=pass header.d=ncsc.gov.uk; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ncsc.gov.uk; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6Xtsrn9harU+2KWe0zlKt6blUV5cl3rYGyitSlo7BX8=; b=DP/MqgTJEhdrjElkpZbiG64Q9mQFo2V+278YfowCQ2OEZjIipGON4hLBuBwNG8c+iibHIcopY12p6Sf4UT0iSZfc/GNFWOe/7WOWyLQwz8PJR3kcYM0vClhXuqEEHK6RInlFNADy1rnaEbsvCkQYIzxzyWY3mkX6MAs+lQmASIroRSB0R7ov6wcl/R447izMt1kAE/4igsdOHvHgU/+2+Npz+vgakKOKpwtMugb7TAdnI7RNWojUJ51bUhs2X/7gQKJOPa1irwdn4vp4n8MLK7f6QZduSHW/ZxHeXV23FxObhOzxX+dNm0nMbRAPLufMh5frvwDrxxHbyoo1tAUULQ== Received: from LO0P123MB3994.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:174::5) by LO6P123MB6310.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:2a6::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.11; Fri, 24 Jul 2026 05:51:42 +0000 Received: from LO0P123MB3994.GBRP123.PROD.OUTLOOK.COM ([fe80::bb05:eb1e:b640:a08a]) by LO0P123MB3994.GBRP123.PROD.OUTLOOK.COM ([fe80::bb05:eb1e:b640:a08a%5]) with mapi id 15.21.0245.010; Fri, 24 Jul 2026 05:51:42 +0000 From: Michael P1 To: IETF SAAG , JOSE WG Thread-Topic: JOSE WG Report for IETF 126 Thread-Index: Ad0bMAZwdKa686y9Q4yHqwVXbXh7LA== Date: Fri, 24 Jul 2026 05:51:42 +0000 Message-ID: Accept-Language: en-US, en-GB Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_baa80bfd-e3bf-43fd-adc3-f03d6b80e814_ActionId=9f495fa9-2d66-4ae7-8ede-b79ccaf096d8;MSIP_Label_baa80bfd-e3bf-43fd-adc3-f03d6b80e814_ContentBits=0;MSIP_Label_baa80bfd-e3bf-43fd-adc3-f03d6b80e814_Enabled=true;MSIP_Label_baa80bfd-e3bf-43fd-adc3-f03d6b80e814_Method=Privileged;MSIP_Label_baa80bfd-e3bf-43fd-adc3-f03d6b80e814_Name=OFFICIAL-UNMARKED;MSIP_Label_baa80bfd-e3bf-43fd-adc3-f03d6b80e814_SetDate=2026-07-24T05:47:21Z;MSIP_Label_baa80bfd-e3bf-43fd-adc3-f03d6b80e814_SiteId=14aa5744-ece1-474e-a2d7-34f46dda64a1;MSIP_Label_baa80bfd-e3bf-43fd-adc3-f03d6b80e814_Tag=10, 0, 1, 1; authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=ncsc.gov.uk; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: LO0P123MB3994:EE_|LO6P123MB6310:EE_ x-ms-office365-filtering-correlation-id: 764f71a4-7ba5-4393-2ef8-08dee947a31e x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|19092799006|366016|23010399003|376014|1800799024|18002099003|8096899003|10067099003|13003099007|38070700021|56012099006|11063799006; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:LO0P123MB3994.GBRP123.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(19092799006)(366016)(23010399003)(376014)(1800799024)(18002099003)(8096899003)(10067099003)(13003099007)(38070700021)(56012099006)(11063799006);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?B85aVZ60b267IQxQlDKZvy3x1RIgbqjfFawjA3G4FkUdXjMre0mQ44QMz/tO?= =?us-ascii?Q?Hj3tj5RTQx+34EzbV0/L9aleX0J9bprzI3PTqevFhCjXYflf3uVCuc44yZHP?= =?us-ascii?Q?6NdEigtcsAcqAx5rX0O6gLUE3dFL4PzS5tV+Xrvmr8u7o91MtAAAgnCOZUdu?= =?us-ascii?Q?9DBqDtmNSJmtXkcxx/3IfXizUuOn7L8kOrgXOcxayuHr2MLfSVmL2DNFY4Dn?= =?us-ascii?Q?HuqKmSiqly+j2sNq0vUx5M0f534M3TA13J1fK8I8A3lDckqHMBJg+aqGHBu+?= =?us-ascii?Q?wDWEV3aqkG+bK2jbAp19Gx0HyDCYgcsVKH1DV0h2oVYJ2n+V40UaD0EZ6fcx?= =?us-ascii?Q?p3yCuh/X0HHdIu4pLfnd/6ryCm8L1Fdl4uUKT5TiL8A5b7CjZEftmcFhfvHp?= =?us-ascii?Q?RTHLkjUZsqByM3ciHXWup2TmhbW3h+b1sii2heNz5vNtcJWPtnhUVx4S+oYB?= =?us-ascii?Q?i6OEvYDDZR+8WoH90Fb4mFwv89u9HvlEqROqlwXomrhZQAH762jqHbEqIIdf?= =?us-ascii?Q?C/DA0wTYl8mdJA/ymLyrk67OGbAAqabl6okVqc39QhRC294qInKXB5D5S9/s?= =?us-ascii?Q?ZQOatnvLEdTFRsbYsw3g9Xf4wMDFA5VSrurxXG78Mippx17QuY0HG9fLiGIY?= =?us-ascii?Q?v/rVVDFB+j/yP6uYmQu3rg3uo1LKoC8+eQ4o3Ep6SHLPsHiAGGHPBYV6mFOf?= =?us-ascii?Q?x3163u4oEVER48FuTxfB+Gu+i3nOmN4OQu1PScg0VhlhijrwjFdi+ukuXXTV?= =?us-ascii?Q?XR+eyjsTfI0g1uh65drILLejD+o3+nxXkMYBeFWyUhzsNFb1MiJoy1rMXSnk?= =?us-ascii?Q?ZxXlkpHJn+lvKuKEkotPSMkIJzyZT8L0mR+RMUAln/dygTqRzcMNi5iZ6CDr?= =?us-ascii?Q?T/xzsvlTaBzHOZhhv7+h70x9lxzWrqU7RA9S4hAfxCmhaG/mkyfV4nlIrckg?= =?us-ascii?Q?tkfW4mwyB+43pf0a2sjZ1lfgNhEwcXKDptPzsZ7PLhjSyFfMyWCsHtU8qAPF?= =?us-ascii?Q?3q+UfaMt5AW8EFNnNpJbavHL2KCmTXR0xMDAT0zOValnORrccZE9/7O0W8ud?= =?us-ascii?Q?SCQnbRHWQQUlh4oamppnwXF+z8ux2Ue8VDN/sQUQInMRtTw6advtp2GjpEUG?= =?us-ascii?Q?GNZw39Ji6J+GQY5yCx2GNeguMjs1tRA6OgPTCRPtQtqHIrMuyC7k4ouE45Bc?= =?us-ascii?Q?y+/6ZmCfOONGMpP7zZpeoqldmgY96AY2Xhhf0QkETl1BN7mQOZAu6GuV+Owl?= =?us-ascii?Q?dNjIR+kYdrXJn8BfeeDm22V5ObZewa/ccLfh6AuCq+t651pmIyUkKzH9URlR?= =?us-ascii?Q?0KuXbWFAFUgpkFd4qGGui9ShWXA/mKAFIQgY0QVYQOSh6PNFRwDJDxkBvXU6?= =?us-ascii?Q?o8xIA9JUuav9L21kZfGwYMmWGfMF/JQWkzxdWj0xkYakqosenjf+PMZ4JLSK?= =?us-ascii?Q?nOhV5uJGaM3s8TMxGVtTgG1akfehJDMBXD7NYVl+yIP2uHd+DR/iJYtlvZq+?= =?us-ascii?Q?0KQli2yi6arIpFnWcY2ix+8tsKbmDkx7klFrnTFmEHT6VxVpMRZ1sh37KIlH?= =?us-ascii?Q?D1AWH/ju72Y3wR2ajyfxTIXc9LjYYhpjXzNTCsZa0kdFU/FyO9PWukpKov65?= =?us-ascii?Q?s0UCZa4U1aQdJJ5/sUxbtyjJrO1qpm/dGx3zPuS9QyqvdKYop+D5Kood9NAP?= =?us-ascii?Q?Gc545LZ8ZueYrHE7rIvv4rB1zaTjKbgZvyp6R9NVSOO2+Zf7ndWrRZH7rOwW?= =?us-ascii?Q?Ojx2WKBEow=3D=3D?= Content-Type: multipart/alternative; boundary="_000_LO0P123MB3994E45F97E3A196F9CC986F8FCF2LO0P123MB3994GBRP_" MIME-Version: 1.0 X-OriginatorOrg: ncsc.gov.uk X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: LO0P123MB3994.GBRP123.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 764f71a4-7ba5-4393-2ef8-08dee947a31e X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jul 2026 05:51:42.1218 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 14aa5744-ece1-474e-a2d7-34f46dda64a1 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: OLypt6/NyHrUsTXdlbXg6tZXz2AfZ1lYNtIRw1XAkwI7BM4d8CXlFIsm/i1FeqJEkpSsCR4gXZeB1Sn4Lwv/s+8FaSqARONtB7WpVXpUJzM= X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO6P123MB6310 Message-ID-Hash: QGMNKMWEHYJ2V4EG6CFJ7XUOO56BMW5Y X-Message-ID-Hash: QGMNKMWEHYJ2V4EG6CFJ7XUOO56BMW5Y X-MailFrom: michael.p1@ncsc.gov.uk X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-jose.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: jose-chairs X-Mailman-Version: 3.3.9rc6 Precedence: list Subject: =?utf-8?q?=5Bjose=5D_JOSE_WG_Report_for_IETF_126?= List-Id: Javascript Object Signing and Encryption Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --_000_LO0P123MB3994E45F97E3A196F9CC986F8FCF2LO0P123MB3994GBRP_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable The JOSE WG met at 14:00-16:00 on Tuesday 21st July. All WG documents were discussed Use of HPKE with JWE (https://datatracker.ietf.org/doc/draft-ietf-jose-hpke= -encrypt/). WG consensus declared shortly after the meeting. JOSE: Deprecate 'none' and 'RSA1_5' (https://datatracker.ietf.org/doc/draft= -ietf-jose-deprecate-none-rsa15/). WG consensus declared shortly after the = meeting. JOSE HPKE PQ & PQ/T Algorithm Registrations (https://datatracker.ietf.org/d= oc/draft-ietf-jose-hpke-pq-pqt/). Review and mailing list discussion were e= ncouraged, aiming for a WGLC before the next meeting. Post-Quantum Key Encapsulation Mechanisms (PQ KEMs) COSE (https://datatrack= er.ietf.org/doc/draft-ietf-jose-pqc-kem/) will not be progressed in the JOS= E WG. JOSE aspects have been removed from the draft. PQ/T Hybrid Composite Signatures for JOSE and COSE (https://datatracker.iet= f.org/doc/draft-ietf-jose-pq-composite-sigs/). Discussions on choice of enc= oding will continue on the mailing list. JSON Web Proof Document set (https://datatracker.ietf.org/doc/draft-ietf-jo= se-json-proof-algorithms/, https://datatracker.ietf.org/doc/draft-ietf-jose= -json-proof-token/, https://datatracker.ietf.org/doc/draft-ietf-jose-json-w= eb-proof/). Progress relies upon work in CFRG. New work was also presented BBS and Modular Sub-proofs with JSON Web Proofs (https://datatracker.ietf.o= rg/doc/draft-bormann-jwp-modular-bbs/) had interest from the working group. Long-Term Validation for JSON Web Signature (LTV-JWS) (https://datatracker.= ietf.org/doc/draft-miyachi-ltv-jws/) will require further discussion on the= mailing list. --_000_LO0P123MB3994E45F97E3A196F9CC986F8FCF2LO0P123MB3994GBRP_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

The JOSE WG met at 14:00-16:00 on Tuesday 21st July.=



All WG documents were discussed

Use of HPKE with JWE (https://datatracker.ietf.org/doc/draft-ietf-jose-hpke= -encrypt/). WG consensus declared shortly after the meeting.

JOSE: Deprecate ‘none’ and ‘RSA1_5’ (https:= //datatracker.ietf.org/doc/draft-ietf-jose-deprecate-none-rsa15/). WG c= onsensus declared shortly after the meeting.

JOSE HPKE PQ & PQ/T Algorithm Registrations (https://datatracker.ietf.or= g/doc/draft-ietf-jose-hpke-pq-pqt/). Review and mailing list discussion= were encouraged, aiming for a WGLC before the next meeting.

Post-Quantum Key Encapsulation Mechanisms (PQ KEMs) COSE (https://datatracker.ie= tf.org/doc/draft-ietf-jose-pqc-kem/) will not be progressed in the JOSE= WG. JOSE aspects have been removed from the draft.

PQ/T Hybrid Composite Signatures for JOSE and COSE (https://datatracke= r.ietf.org/doc/draft-ietf-jose-pq-composite-sigs/). Discussions on choi= ce of encoding will continue on the mailing list.

JSON Web Proof Document set (https://datatracker.ietf.org/doc/draf= t-ietf-jose-json-proof-algorithms/, https://datatracker.ietf.org/doc/draft-ietf-jose-json-proof-token/, https://datatracker.ietf.org/doc/draft-ietf-jose-json-web-proof/). Pr= ogress relies upon work in CFRG.



New work was also presented

BBS and Modular Sub-proofs with JSON Web Proofs (https://datatracker.ietf.= org/doc/draft-bormann-jwp-modular-bbs/) had interest from the working g= roup.

Long-Term Validation for JSON Web Signature (LTV-JWS) (https://datatracker.ietf.or= g/doc/draft-miyachi-ltv-jws/) will require further discussion on the ma= iling list.

--_000_LO0P123MB3994E45F97E3A196F9CC986F8FCF2LO0P123MB3994GBRP_--