Issues

• Key directory alg: the drafts name HTTP Signature Algorithms values, and verifierFromJWK accepts only JOSE values

  cloudflare/web-bot-auth#168 · Filter by author KonstantinMirin opened on Oct 19, 2026

• Caddy plugin example: signatures with another tag, or that skip Signature-Agent, verify

  cloudflare/web-bot-auth#166 · Filter by author KonstantinMirin opened on Oct 18, 2026

• Let verify() callers require coverage before key lookup, and export the strict field parser

  cloudflare/web-bot-auth#165 · Filter by author KonstantinMirin opened on Oct 18, 2026

• http-signature-directory: check Content-Digest, a future created, and content-digest coverage (Appendix B.1)

  cloudflare/web-bot-auth#164 · Filter by author KonstantinMirin opened on Oct 18, 2026

• Signature-Agent parsers accept an http directory member

  cloudflare/web-bot-auth#162 · Filter by author KonstantinMirin opened on Oct 18, 2026

• TypeScript should support validating multiple signatures and filtering by label

  enhancement
  cloudflare/web-bot-auth#102 · Filter by author thibmeu opened on Jun 29, 2026

• Caddy plugin example: Provision swallows directory-fetch errors (nil-validator panic) and only ever loads the first key

  cloudflare/web-bot-auth#88 · Filter by author joeblew999 opened on Jun 4, 2026
  1

  

• No support for ECDSA P-256

  enhancement
  cloudflare/web-bot-auth#71 · Filter by author SegalMan opened on Feb 15, 2026
  3

• Verification website should use keyid to select key from the directory

  enhancement
  Feature

  cloudflare/web-bot-auth#58 · Filter by author thibmeu opened on Sep 26, 2025

• PQC signature

  cloudflare/web-bot-auth#12 · Filter by author loganaden opened on May 23, 2025
  2

• Extend HTTP field support in http-message-sig

  enhancement
  Task

  cloudflare/web-bot-auth#11 · Filter by author thibmeu opened on May 22, 2025
  1