3 ms·
>3. Register your bot and key directory Register with CF is the specific part I object to. Of all of the numerous hazards here centralizing the registration wi
by palmfacehn 1y ago
>3. Register your bot and key directory
Register with CF is the specific part I object to. Of all of the numerous hazards here centralizing the registration with CF is most clearly problematic. This part of the spec could have easily been an additional header linking to key data.
- bobbiechen 1y agoGood news - this part of the spec is literally an additional header linking to key data: https://datatracker.ietf.org/doc/html/draft-meunier-http-message-signatures-directory-01 https://datatracker.ietf.org/doc/html/draft-meunier-http-mes... . Cloudflare is doing this registration as part of their "verified" program, which gives special treatment to bots/agents who go through the process. That's a Cloudflare-specific feature, not part of the spec.
- palmfacehn 1y agoNice catch. Even if we like the standard, the specific implementation can have problems. MSIE, extend and embrace are similar examples.