diff --git a/README.md b/README.md
--- a/README.md
+++ b/README.md
@@ -2,11 +2,13 @@
 
 jose is a Haskell implementation of [Javascript Object Signing and
 Encryption](https://datatracker.ietf.org/wg/jose/) and [JSON Web
-Token]
-(https://datatracker.ietf.org/doc/draft-ietf-oauth-json-web-token/).
+Token](https://tools.ietf.org/html/rfc7519).
 
 Encryption (JWE) is not supported but signing is supported.  All key
 types and algorithms are supported, but EC and symmetric key
 generation is not yet implemented.
+
+EC signing is currently vulnerable to timing attacks therefore its
+use is **strongly discouraged**.  (EC validation is safe).
 
 Contributions are welcome.
diff --git a/jose.cabal b/jose.cabal
--- a/jose.cabal
+++ b/jose.cabal
@@ -1,13 +1,14 @@
 name:                jose
-version:             0.3.41.1
+version:             0.3.41.2
 synopsis:
   Javascript Object Signing and Encryption and JSON Web Token library
 description:
   .
   An implementation of the Javascript Object Signing and Encryption
-  (JOSE) and JSON Web Token (JWT) formats.
+  (JOSE) and JSON Web Token (JWT; RFC 5717) formats.
   .
-  Web Encryption (JWE) is not yet implemented.
+  The JSON Web Signature (JWS; RFC 5715) implementation is complete.
+  JSON Web Encryption (JWE; RFC 5716) is not yet implemented.
   .
   All JWS algorithms (HMAC, ECDSA, RSASSA-PKCS-v1_5 and RSASSA-PSS)
   are implemented, however, the ECDSA implementation is is
@@ -18,10 +19,6 @@
   Mozilla Persona (formerly BrowserID) key format.  Only RSA keys
   are supported - DSA keys cannot be used and must be handled as
   opaque objects.
-  .
-  The version number tracks the IETF jose working group draft
-  revisions.  For now, expect breaking API changes on any version
-  change except for the final (fourth) part being incremented.
 
 homepage:            https://github.com/frasertweedale/hs-jose
 bug-reports:         https://github.com/frasertweedale/hs-jose/issues
@@ -76,11 +73,11 @@
     , template-haskell >= 2.4
     , safe >= 0.3
     , semigroups >= 0.15
-    , aeson >= 0.7 && < 0.9
+    , aeson >= 0.8.0.1 && < 0.9
     , unordered-containers == 0.2.*
     , bytestring == 0.10.*
     , text >= 1.1
-    , time == 1.4.*
+    , time >= 1.5
     , network-uri >= 2.6
     , x509 >= 1.4
     , vector
@@ -114,7 +111,6 @@
     , cryptohash
     , data-default-class
     , lens
-    , old-locale
     , template-haskell
     , safe
     , semigroups
diff --git a/test/JWT.hs b/test/JWT.hs
--- a/test/JWT.hs
+++ b/test/JWT.hs
@@ -25,7 +25,6 @@
 import Data.Time
 import Network.URI (parseURI)
 import Safe (headMay)
-import System.Locale
 import Test.Hspec
 
 import Crypto.JOSE
@@ -33,7 +32,7 @@
 
 
 intDate :: String -> Maybe NumericDate
-intDate = fmap NumericDate . parseTime defaultTimeLocale "%F %T"
+intDate = fmap NumericDate . parseTimeM True defaultTimeLocale "%F %T"
 
 exampleClaimsSet :: ClaimsSet
 exampleClaimsSet = emptyClaimsSet