<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title></title>
</head>
<body>
<div name="messageBodySection">
<div dir="auto">Too late. Need to be done with errata. </div>
</div>
<div name="messageSignatureSection"><br />
<div dir="auto">Nat Sakimura<br />
Executive Fellow, Tokyo Digital IDeas</div>
</div>
<div name="messageReplySection">
<div dir="auto">2021年3月10日 2:37 +0900、josephheenan via Openid-specs-fapi <openid-specs-fapi@lists.openid.net>のメール:</div>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;">New issue 391: text about encryption algorithms in part2 may need clarification</blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;">https://bitbucket.org/openid/fapi/issues/391/text-about-encryption-algorithms-in-part2</blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;"><br /></blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;">Joseph Heenan:</blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;"><br /></blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;">Part 2 currently states:</blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;"><br /></blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;">---</blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;"><br /></blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;">For JWE, both clients and authorization servers</blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;"><br /></blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;">1. shall not use the `RSA1_5` algorithm.</blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;"><br /></blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;">---</blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;"><br /></blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;">[https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms](https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms) lists various encryption algorithms. I presume it’s probably implicit that you shouldn’t use an algorithm listed as prohibited there \(e.g. `A128CBC`\) but perhaps we should be more explicit? \(Originally brought to my attention by Ray Voss in the FDX Security WG.\)</blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;"><br /></blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;">I’m also not entirely clear that it’s in keeping to allow the use of symmetric keys \(`dir`\).</blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;"><br /></blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;"></blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;"><br /></blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;"><br /></blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;">_______________________________________________</blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;">Openid-specs-fapi mailing list</blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;">Openid-specs-fapi@lists.openid.net</blockquote>
<blockquote style="border-left: thin solid rgb(26, 188, 156); margin: 0px; padding-left: 10px; padding-bottom: 5px; padding-top: 5px;">http://lists.openid.net/mailman/listinfo/openid-specs-fapi</blockquote>
</div>
</body>
</html>