[saag] JOSE @ IETF 122

The JOSE WG had a single session this morning. Topics covered were:

Fully Specified Algorithms for JOSE and COSE (
https://datatracker.ietf.org/doc/draft-ietf-jose-fully-specified-algorithms/)
is making progress through the IESG have been reviewed by the AD.

Use of HPKE with JOSE (
https://datatracker.ietf.org/doc/draft-ietf-jose-hpke-encrypt/) had
updates, but it still isn't quite ready for a WGLC. Suggestion to pay
attention to the HPKE conversation in SAAG and get involved in the
potential working group, if formed.

JSON Web Proof Drafts (
https://datatracker.ietf.org/doc/draft-ietf-jose-json-web-proof/,
https://datatracker.ietf.org/doc/draft-ietf-jose-json-proof-algorithms/,
and https://datatracker.ietf.org/doc/draft-ietf-jose-json-proof-token/)
have been updated with a number of open issues. Feedback solicited.

JOSE: Deprecate 'none' and 'RSA1_5' (
https://datatracker.ietf.org/doc/draft-ietf-jose-deprecate-none-rsa15/) has
had limited review and needs more before proceeding to WGLC. Specific
volunteers were identified to review the current draft.

Enhanced JWE Security with Detached Additional Authenticated Data (AAD) (
https://datatracker.ietf.org/doc/draft-reddy-jose-detached-aad/). There
isn't consensus yet that there is a problem to be solved here.

There was also a presentation on Modern Algorithms in the Web Cryptography
API from Filip Skokan. Discussed the addition of various algorithms. Good
example of coordination between IETF and W3C. Further information will be
communicated between the two groups.

_______________________________________________
saag mailing list -- [email protected]
To unsubscribe send an email to [email protected]