This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.
In Section 18 the spec allows use of the value "RS1" for the "alg" field in a JWK. However this algorithm is not registered in either JWA or this spec. The registration needs to be added: • Algorithm Name: "RS1" • Algorithm Description: RSASSA-PKCS-v1_5 using SHA-1 • Algorithm Usage Location(s): "alg" • JOSE Implementation Requirements: Deprecated • Change Controller: W3C Web Cryptography Working Group • Specification Document(s): [[ This Document ]] Also we suggest labeling "HS1" as "deprecated" instead of "prohibited".
https://dvcs.w3.org/hg/webcrypto-api/rev/858becd55b52