Several ASPSPs are unable to issue JWTs that are signed with the PS256 algorithm. This algorithm, PS256, is the mandated algorithm for signing of JWTs under both the OB and FAPI standard that supports the RSA certificates created by Open Banking. Many of the ASPSPs have confirmed that they will be unable to issue JWTs signed by PS256 as a result of poor library support in their vendor applications and internal approved security libraries.
A waiver should be granted for all ASPSP participants and OB itself not to be required to support the issuance of PS256 signed JWTs. This has an ecosystem impact in that collectively the ecosystem is not specification compliant in this one small area.