Skip to content

Separate crawler and agent signing identities - #140

Merged
thibmeu merged 2 commits into
webbotauth:mainfrom
e271828-:main
Oct 22, 2026
Merged

thibmeu merged 2 commits into
webbotauth:mainfrom
e271828-:main

Conversation

@e271828-

@e271828- e271828- commented Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Clarifies Section 6.5: crawlers with different purposes, and crawlers versus user-directed agent platforms, SHOULD use distinct Signature-Agent URLs, signing keys, and key directories.

Companion to garyillyes/cbcp#23. Based on consensus from on-list discussions with Akamai and hCaptcha and off-list discussions with others.

Comment thread draft-ietf-webbotauth-httpsig-protocol.md Outdated
Co-authored-by: Thibault <thibmeu@users.noreply.github.com>
@e271828-
e271828- requested a review from thibmeu October 22, 2026 17:44
@thibmeu
thibmeu merged commit b485735 into webbotauth:main Oct 22, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants