%% You should probably cite draft-ietf-jose-deprecate-none-rsa15-05 instead of this revision. @techreport{ietf-jose-deprecate-none-rsa15-04, number = {draft-ietf-jose-deprecate-none-rsa15-04}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-jose-deprecate-none-rsa15/04/}, author = {Neil Madden}, title = {{JOSE: Deprecate 'none' and 'RSA1\_5'}}, pagetotal = 8, year = 2026, month = mar, day = 2, abstract = {This document updates {[}RFC7518{]} to deprecate the JWS algorithm "none" and the JWE algorithm "RSA1\_5". These algorithms have known security weaknesses. It also updates the Review Instructions for Designated Experts to establish baseline security requirements that future algorithm registrations should meet.}, }