It should be retroactively removed the spec, and all implementations should remove the "none" algorithm. It is a huge security hole.