Skip to content

Releases: WebDecoy/web-bot-auth

Release list

v0.4.1 — Directory fetch contract

v0.4.1 — Directory fetch contract Latest
Latest

Choose a tag to compare

View all tags
@cport1 cport1 released this 04 Sep 03:24
v0.4.1
3fb19ad
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Out-of-band directory discovery now requires HTTP 200, rejects redirects, validates the directory media type, and validates the supplied origin shape.

Assets 2
Loading

v0.4.0 — Web Bot Auth WG draft alignment

v0.4.0 — Web Bot Auth WG draft alignment

Choose a tag to compare

View all tags
@cport1 cport1 released this 04 Sep 03:07
v0.4.0
477a789
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Aligns signing and verification with draft-ietf-webbotauth-httpsig-protocol-00.

  • Signs the exact Signature-Agent dictionary member by default.
  • Requires Signature-Agent during verification.
  • Adds explicit compatibility modes for legacy bare-string signers and historical missing-header fixtures.
  • Validated against Cloudflare's live crawltest.com parser.
Loading