Remediation
The site signals support for the Web Bot Auth IETF draft (HTTP Message Signatures over a known JWKS) so well-behaved agents can prove identity.
discoverability.web_bot_authdiscoverabilityweight 1deterministic
Why it matters
The site signals support for the Web Bot Auth IETF draft (HTTP Message Signatures over a known JWKS) so well-behaved agents can prove identity.
Underlying specification: https://datatracker.ietf.org/doc/draft-meunier-web-bot-auth-architecture/
How to fix
- See the full check definition in the rubric (linked above) for the canonical reference.
- Read the underlying specification at https://datatracker.ietf.org/doc/draft-meunier-web-bot-auth-architecture/.
Run a scan to check your site
Verify on your site
Run a scan against your domain to see whether discoverability.web_bot_auth currently passes, warns, or fails. Free, no signup; the score page is permanent and citable.