Standards & ProtocolsCrawlers & Content ControlsAgentic Web Web Bot Auth (spec repo) ·

Cloudflare Patches Web Bot Auth Rust Verifier to Enforce Expiration Checks

Open source ↗

Development

Cloudflare updated its Web Bot Auth Rust reference implementation to reject expired signatures by default during verification. Previously, WebBotAuthVerifier::verify permitted signatures with elapsed expiration timestamps if the cryptographic payload was otherwise valid. The change aligns the Rust library’s fail-closed behavior with the TypeScript implementation.

Why it matters

As cryptographic signatures become the cornerstone for verifying automated agents, inconsistent expiration validation across SDKs could allow malicious actors to exploit stale credentials.

Trend impact

  • cryptographic bot authentication
  • fail-closed verification
  • bot identity standardization

Evidence