Hacker News new | ask | show | jobs
by palmfacehn 300 days ago
>3. Register your bot and key directory

Register with CF is the specific part I object to. Of all of the numerous hazards here centralizing the registration with CF is most clearly problematic. This part of the spec could have easily been an additional header linking to key data.
1 comments
bobbiechen 300 days ago
Good news - this part of the spec is literally an additional header linking to key data: https://datatracker.ietf.org/doc/html/draft-meunier-http-mes... .

Cloudflare is doing this registration as part of their "verified" program, which gives special treatment to bots/agents who go through the process. That's a Cloudflare-specific feature, not part of the spec.

link
palmfacehn 299 days ago
Nice catch. Even if we like the standard, the specific implementation can have problems. MSIE, extend and embrace are similar examples.
link