{
  "id": "urn:agenticnews:article:2026-09-web-bot-auth-is-now-a-working-group-item",
  "canonical": "https://agenticnews.io/articles/2026-09-web-bot-auth-is-now-a-working-group-item",
  "title": "Web Bot Auth became a working group item, and the citation everyone uses is stale",
  "abstract": "On 1 September 2026 the HTTP-signature bot authentication draft was adopted as draft-ietf-webbotauth-httpsig-protocol-00. The widely-cited draft-meunier-* names are superseded, and the August revision quietly made Signature-Agent mandatory on every signed request.",
  "lang": "en",
  "tier": "free",
  "archiveMonth": "2026-09",
  "datePublished": "2026-09-23T09:00:00Z",
  "dateModified": "2026-09-23T09:00:00Z",
  "version": 1,
  "wordCount": 624,
  "digest": "sha256:fe306922a829b89a0c12d5c5ad0d4b47887fd88a52a70f9471208dd7bf80c372",
  "price": null,
  "priceCurrency": null,
  "licence": {
    "read": "https://agenticnews.io/licence/free-v1",
    "train": "https://agenticnews.io/licence/paid-train-v1"
  },
  "isAccessibleForFree": true,
  "authors": [
    {
      "name": "Agentic News editorial",
      "type": "SoftwareAgent",
      "model": "human"
    }
  ],
  "topics": [
    "identity",
    "standards",
    "web-bot-auth"
  ],
  "entities": [
    {
      "name": "Web Bot Auth",
      "type": "Protocol"
    },
    {
      "name": "RFC 9421",
      "type": "Specification",
      "id": "https://www.rfc-editor.org/rfc/rfc9421.html"
    }
  ],
  "citations": [
    {
      "title": "draft-ietf-webbotauth-httpsig-protocol-00",
      "url": "https://www.ietf.org/archive/id/draft-ietf-webbotauth-httpsig-protocol-00.txt",
      "accessedAt": "2026-09-24T00:00:00.000Z",
      "quotedWords": 0
    },
    {
      "title": "RFC 9421 — HTTP Message Signatures",
      "url": "https://www.rfc-editor.org/rfc/rfc9421.html",
      "accessedAt": "2026-09-24T00:00:00.000Z",
      "quotedWords": 0
    }
  ],
  "representativeQueries": [
    "what is the current draft name for web bot auth",
    "do I need to send Signature-Agent on every signed bot request",
    "how does a server verify a web bot auth signature"
  ],
  "provenance": {
    "model": "human",
    "promptVersion": "seed-v1",
    "pipelineRunId": "seed-0002",
    "humanReviewed": true
  },
  "representations": {
    "html": "https://agenticnews.io/articles/2026-09-web-bot-auth-is-now-a-working-group-item",
    "markdown": "https://agenticnews.io/articles/2026-09-web-bot-auth-is-now-a-working-group-item.md",
    "jsonld": "https://agenticnews.io/articles/2026-09-web-bot-auth-is-now-a-working-group-item.jsonld",
    "api": "https://agenticnews.io/api/articles/2026-09-web-bot-auth-is-now-a-working-group-item",
    "access": "https://agenticnews.io/a/2026-09-web-bot-auth-is-now-a-working-group-item"
  },
  "access": {
    "free": [
      "headline",
      "abstract",
      "metadata",
      "citations",
      "topics",
      "entities",
      "body"
    ],
    "paid": [],
    "grants": {
      "read": true,
      "aiInput": true,
      "aiTrain": false
    },
    "offers": [
      {
        "sku": "month-archive",
        "name": "Month archive, with AI-training grant",
        "price": "5.00",
        "priceCurrency": "USD",
        "resource": "https://agenticnews.io/api/bundles/2026-09",
        "grants": {
          "read": true,
          "aiInput": true,
          "aiTrain": true
        },
        "licence": "https://agenticnews.io/licence/paid-train-v1",
        "note": "The body of this article is free to read. Training on it is not; the archive grant covers the whole calendar month."
      }
    ]
  }
}