# cose (blogs) — RSS Amplifier

Recent posts from the 2 feeds in the RSS Amplifier directory that cover cose.

Page: <https://rssamplifier.com/topics/cose/blogs>  
Feed: <https://rssamplifier.com/topics/cose/blogs.md>

---

## [JOSE and COSE HPKE specifications continuing to progress](https://self-issued.info/?p=2871)

_2026-07-11 · Mike Jones · Mike Jones: self-issued_

The JOSE and COSE HPKE specs, “Use of Hybrid Public Key Encryption (HPKE) with JSON Web Encryption (JWE)” and “Use of Hybrid Public-Key Encryption (HPKE) with CBOR Object Signing and Encryption (COSE)” are continuing to progress towards completion. The JOSE HPKE spec successfully completed its second working group last call (WGLC) in February 2026, received \[…\]

## [Progress Report on Handling an Actionable Security Vulnerability](https://self-issued.info/?p=2861)

_2026-05-29 · Mike Jones · Mike Jones: self-issued_

I gave a presentation at the 2026 OAuth Security Workshop in Leipzig describing the actions we took when an actionable security vulnerability was discovered affecting numerous OpenID and OAuth specifications. Much of the information discussed was not previously public. As I described when writing about a spec we created to address the problems, the security \[…\]

## [Post-Quantum Signatures for JOSE and COSE](https://self-issued.info/?p=2853)

_2026-05-20 · Mike Jones · Mike Jones: self-issued_

Congratulations to Mike Prorock and Orie Steele on the publication of “ML-DSA for JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE)” as RFC 9964! This is a major step forward towards enabling widely-available post-quantum signatures for the Internet and devices. The abstract from the RFC is: This document specifies JSON \[…\]

## [Final 1.1 OpenID Federation Specs](https://self-issued.info/?p=2849)

_2026-05-11 · Mike Jones · Mike Jones: self-issued_

I’m pleased to report that the Final 1.1 OpenID Federation specifications have been published. These meet the demand for cleanly separating the protocol-independent OpenID Federation functionality from the protocol-specific OpenID Federation functionality for OpenID Connect. As I described when these specs were first published, the OpenID Federation 1.0 specification contains two kinds of…

## [OpenID Presentations at April 2026 OpenID Workshop and IIW](https://self-issued.info/?p=2845)

_2026-04-28 · Mike Jones · Mike Jones: self-issued_

I gave the following presentation on behalf of the OpenID Connect Working Group at the Monday, April 27, 2026 OpenID Workshop at Cisco: OpenID Connect Working Group Update (PowerPoint) (PDF) And as has become traditional, I also gave this invited “101” session presentation at the Internet Identity Workshop (IIW) on Tuesday, April 28, 2026: Introduction \[…\]

## [Presentation on the OpenID Federation Journey at TDI 2026](https://self-issued.info/?p=2840)

_2026-04-27 · Mike Jones · Mike Jones: self-issued_

I gave the presentation “The Journey to OpenID Federation 1.0 and the Road Ahead” at the 4th International Workshop on Trends in Digital Identity (TDI 2026) in Verona, Italy. My talk abstract was: The OpenID Federation 1.0 specification was completed in February 2026 after a 9½ year journey, starting with the challenge from Lucy Lynch \[…\]

## [Post-Quantum Presentation at TDI 2026](https://self-issued.info/?p=2834)

_2026-04-27 · Mike Jones · Mike Jones: self-issued_

I gave the presentation “The Post-Quantum Apocalypse Is Already Upon Us” at the 4th International Workshop on Trends in Digital Identity (TDI 2026) in Verona, Italy. My talk abstract was: “The future is already here — it’s just not evenly distributed” is an apt description of the impact of quantum computers on cryptography and its \[…\]

## [FIDO2 CTAP 2.3 standard and Server Requirements published](https://self-issued.info/?p=2829)

_2026-04-15 · Mike Jones · Mike Jones: self-issued_

The FIDO Alliance has published the CTAP 2.3 Specification. No breaking changes were introduced between CTAP 2.2 and CTAP 2.3. Implementations of CTAP 2.2 are thus conformant to CTAP 2.3, therefore, a decision was made to provide certification of CTAP 2.3 implementations and not have a separate certification category for CTAP 2.2 implementations. These are \[…\]

## [Final OpenID Connect RP Metadata Choices Specification](https://self-issued.info/?p=2824)

_2026-04-01 · Mike Jones · Mike Jones: self-issued_

The OpenID Connect Relying Party Metadata Choices 1.0 specification has been approved as a Final Specification by the OpenID Foundation membership. The declarations enabled by this specification give an OpenID Provider the information needed to successfully interact with a Relying Party that has not previously registered with it. As I wrote when this became an \[…\]

## [The Journey to OpenID Federation 1.0 is Complete](https://self-issued.info/?p=2813)

_2026-02-18 · Mike Jones · Mike Jones: self-issued_

The final OpenID Federation 1.0 specification was published today. This marks the end of a nearly decade-long journey and the beginning of new ones. At the 2016 TNC conference, Lucy Lynch challenged Roland Hedberg, saying “If there is someone who should be able to bring the eduGAIN identity federation into the new world of OpenID \[…\]

## [Point a Domain, Start a Pit (Sponsored)](https://crawlproof.com/a/0woy9i79d9dG)

_2026-02-18 · **Sponsored**_

Point any domain to a blacked-out, poison-green coming-soon page with an email waitlist.

## [OpenID Federation Interop Event at TIIME 2026 in Amsterdam](https://self-issued.info/?p=2807)

_2026-02-17 · Mike Jones · Mike Jones: self-issued_

Implementers of OpenID Federation gathered at the 2026 Trust and Internet Identity Meeting Europe (TIIME) unconference in Amsterdam on Friday, February 13, 2026 to test their implementations with one another. 12 people with 9 implementations and from 9 countries performed interop tests together. Participants were from Croatia, Finland, Greece, Italy, Netherlands, Poland, Serbia, Sweden, and \[…\]

## [OpenID Federation Presentation at 2026 TIIME Unconference](https://self-issued.info/?p=2805)

_2026-02-13 · Mike Jones · Mike Jones: self-issued_

I had the pleasure of presenting an overview of OpenID Federation during the 2026 Trust and Internet Identity Meeting Europe (TIIME) unconference in Amsterdam. It was the opening talk in a day dedicated to OpenID Federation – Friday, February 13, 2026. There were ~90 practitioners in attendance. They asked great practical questions, including about how \[…\]

## [Initial Drafts of 1.1 OpenID Federation Specs](https://self-issued.info/?p=2797)

_2026-01-03 · Mike Jones · Mike Jones: self-issued_

The OpenID Federation 1.0 specification contains two kinds of functionality: Protocol-independent federation functionality used for establishing trust and applying policies in multilateral federations, and Protocol-specific federation functionality that can be used by OpenID Connect and OAuth 2.0 deployments to apply the protocol-independent federation functionality. At the urging of implementers…

## [COSE HPKE Spec Aligned with JOSE HPKE Spec](https://self-issued.info/?p=2794)

_2025-12-16 · Mike Jones · Mike Jones: self-issued_

The “Use of Hybrid Public-Key Encryption (HPKE) with CBOR Object Signing and Encryption (COSE)” specification has been updated to align with pertinent changes recently applied to the JOSE HPKE specification. Changes in draft 19 are: Utilize distinct algorithm identifiers for the use of HPKE for Integrated Encryption and HPKE for Key Encryption. Adds HPKE-7 algorithms. \[…\]

## [OpenID Federation Discussion at 2025 TechEx](https://self-issued.info/?p=2789)

_2025-12-12 · Mike Jones · Mike Jones: self-issued_

I was encouraged by Pål Axelsson to hold an unconference discussion giving an overview of OpenID Federation during the 2025 Internet2 Technology Exchange conference in Denver. So I did so with a receptive and engaged group of participants yesterday, Thursday, December 11, 2025. See the notes from the Thursday session by Phil Smart, which include \[…\]

## [My Unplanned Multi-Platform Passkey Adventure](https://self-issued.info/?p=2781)

_2025-12-05 · Mike Jones · Mike Jones: self-issued_

I am my wife Becky’s password manager. I keep all of her passwords (and mine) in an encrypted Excel spreadsheet – something I’ve done since before password manager applications existed. Yesterday I had reason to log into her Amazon account to help her place an order for puppy food and encountered a surprise. The password \[…\]

## [Finishing the OpenID Federation 1.0 Specification](https://self-issued.info/?p=2778)

_2025-12-04 · Mike Jones · Mike Jones: self-issued_

The OpenID Federation 1.0 specification has started its 60-day review to become an OpenID Final Specification. Draft 46 of the specification, which was published today, is the target of the 60-day review. Thanks to all who participated in the Working Group Last Call (WGLC) review, which was based on Draft 45. Your feedback resulted in \[…\]

## [Design Team Decisions Applied to JOSE HPKE Specification](https://self-issued.info/?p=2772)

_2025-11-30 · Mike Jones · Mike Jones: self-issued_

A design team formed and met after the JOSE working group meeting at IETF 124 in Montreal to discuss possible next steps for the JOSE HPKE specification. As recorded in the PR applying the decisions made, the design team produced these recommendations: Not use "enc" when performing Integrated Encryption. Define one new Key Management Mode \[…\]

## [Working Group Last Call for OpenID Federation](https://self-issued.info/?p=2766)

_2025-11-21 · Mike Jones · Mike Jones: self-issued_

Today the OpenID Connect Working Group started a two-week Working Group Last Call (WGLC) for the OpenID Federation 1.0 specification. During the two weeks ending on December 4, 2025, working group members will identify any issues that they believe should be addressed before it becomes final. Of course, responses of the form “It’s ready to \[…\]

## [Fully-Specified Algorithms for JOSE and COSE is now RFC 9864](https://self-issued.info/?p=2762)

_2025-10-30 · Mike Jones · Mike Jones: self-issued_

The “Fully-Specified Algorithms for JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE)” specification has been published as RFC 9864! I believe that this is the first RFC I’ve worked on that started its journey as a presentation of an idea to the working group without an accompanying draft. The idea \[…\]

## [Sync bookmarks across every browser (Sponsored)](https://crawlproof.com/a/QNkHxlxdMB3V)

_2025-10-30 · **Sponsored**_

Two-way sync across Chrome, Firefox and Safari; built-in ad and tracker blocker.

## [Le folle di metamorfosi, l'incoerenza](https://picnicparty.org/le-metamorfosi-incoerenza/)

_2025-08-04 · hidden (2anser) · Anser anser Picnic Party_

È passato un sacco di tempo dall'ultima volta che ho scritto qui. Recentemente mi ero promesso di impegnarmi più spesso nella scrittura. Innanzitutto, mi aiuta a mettere ordine alle mie idee (ed era uno dei motivi per cui ho aperto questo blog) e tiene traccia dell'evoluzione del mio pensiero. Recentemente sono cambiate tante cose nella mia vita, e ho avuto modo di scontrarmi con una serie di…

## [L'establishment](https://picnicparty.org/establishment/)

_2025-05-08 · hidden (2anser) · Anser anser Picnic Party_

Vorrei abolire la democrazia rappresentativa, bucare il capitalismo, terminare l'industria dei combustibili fossili, uccidere (ontologicamente?) i dittatori e il potere repressivo, portare la pace (per ogni ragazzo e per ogni ragazza), costruire case piene di verde, andare all'assemblea cittadina per discutere del prezzo delle monorotaie, ridistribuire la ricchezza, abolire Dio, abolire la Patria,…

## [Cristoforo I di Danimarca](https://picnicparty.org/cristoforo-primo/)

_2025-01-08 · hidden (2anser) · Anser anser Picnic Party_

Uomini bianchi vogliono conquistare terre verdi, altri uomini bianchi stringono alleanze con gli altri uomini bianchi e sperano di mangiare quanto più frumento possibile al banchetto degli uomini. Nel frattempo ancora uomini bruni fanno cadere ferraglia su altri uomini bruni, e il frumento lì è dei granai in terre azzurre. Oggi la grande azienda di consulenza ha proposto il nuovo prodotto, alcuni…

## [La grossa azienda di consulenza](https://picnicparty.org/grossa-azienda-consulenza/)

_2024-12-05 · hidden (2anser) · Anser anser Picnic Party_

Ho iniziato da un mese un corso di alta formazione con una di quelle grosse aziende di consulenza e la mia università. È stato un mese frenetico: sto scoprendo un sacco di cose, soprattutto cosa non mi piace, e sono piuttosto turbato ma anche rassicurato circa il mercato del lavoro qui. Molte cose sono divertenti, alcuni dipendenti pittoreschi ma sono soprattutto molto preoccupato sulle…

## [Our failures are stars.](https://picnicparty.org/failures-stars-love/)

_2024-08-29 · hidden (2anser) · Anser anser Picnic Party_

Quando è il momento in cui ci rendiamo conto che abbiamo applicato e vissuto cose agendo con le nostre emozioni e non con la razionalità? Quando è il momento in cui la bolla esplode e ci rendiamo conto dell'altro e prendiamo in mano il futuro all'angolo? Ho bisogno di più tempo per avere a che fare con i miei sentimenti? Per avere a che fare? Conosci qualcuno, vuoi sempre andare oltre. Nuovi…