{"meta": {"limit": 20, "next": null, "offset": 0, "previous": null, "total_count": 10}, "objects": [{"abstract": "   This document describes best practices for web crawlers.\n\nDiscussion Venues\n\n   This note is to be removed before publishing as an RFC.\n\n   Source for this draft and an issue tracker can be found at\n   https://github.com/garyillyes/cbcp.\n", "ad": null, "expires": "2026-10-23T21:25:46Z", "external_url": "", "group": "/api/v1/group/group/1027/", "id": 156305, "intended_std_level": null, "keywords": "[]", "name": "draft-illyes-webbotauth-cbcp", "note": "", "notify": "", "pages": 7, "resource_uri": "/api/v1/doc/document/draft-illyes-webbotauth-cbcp/", "rev": "00", "rfc": null, "rfc_number": null, "shepherd": null, "states": ["/api/v1/doc/state/1/", "/api/v1/doc/state/150/"], "std_level": null, "stream": null, "submissions": ["/api/v1/submit/submission/162430/"], "tags": [], "time": "2026-04-21T21:25:46Z", "title": "Crawler best practices", "type": "/api/v1/name/doctypename/draft/", "uploaded_filename": "", "words": null}, {"abstract": "   This document defines a standardized JSON format for operators of\n   automated HTTP clients (e.g., web crawlers, AI bots) to publicly\n   disclose their IP address ranges.  A consistent, machine-readable\n   format for IP range publication simplifies the task of identifying\n   and verifying legitimate automated traffic, thereby decreasing\n   maintenance load on website operators while reducing the risk of\n   inadvertently blocking beneficial clients.  This specification\n   codifies and extends common existing practices to provide a simple\n   yet extensible format that accommodates a variety of use cases.\n", "ad": null, "expires": "2026-10-23T21:15:29Z", "external_url": "", "group": "/api/v1/group/group/1027/", "id": 156303, "intended_std_level": null, "keywords": "[]", "name": "draft-illyes-webbotauth-jafar", "note": "", "notify": "", "pages": 11, "resource_uri": "/api/v1/doc/document/draft-illyes-webbotauth-jafar/", "rev": "00", "rfc": null, "rfc_number": null, "shepherd": null, "states": ["/api/v1/doc/state/1/", "/api/v1/doc/state/150/"], "std_level": null, "stream": null, "submissions": ["/api/v1/submit/submission/162429/"], "tags": [], "time": "2026-04-21T21:15:29Z", "title": "A JSON-Based Format for Publishing IP Ranges of Automated HTTP Clients", "type": "/api/v1/name/doctypename/draft/", "uploaded_filename": "", "words": null}, {"abstract": "   This document defines the \"Signature Agent Card\", a JSON metadata\n   document that a signature agent using [DIRECTORY] publishes to\n   describe itself: its identity, purpose, rate expectations, and\n   cryptographic keys.  Its parameters are drawn from the OAuth Dynamic\n   Client Registration Metadata registry [DCR], the same namespace used\n   by [CIMD], extended with a single web_bot_auth object.  This document\n   registers that object with IANA and establishes a registry for its\n   members.\n", "ad": null, "expires": "2026-12-28T15:36:28Z", "external_url": "", "group": "/api/v1/group/group/1027/", "id": 149470, "intended_std_level": null, "keywords": "[]", "name": "draft-meunier-webbotauth-registry", "note": "", "notify": "", "pages": 26, "resource_uri": "/api/v1/doc/document/draft-meunier-webbotauth-registry/", "rev": "03", "rfc": null, "rfc_number": null, "shepherd": null, "states": ["/api/v1/doc/state/1/", "/api/v1/doc/state/150/"], "std_level": null, "stream": null, "submissions": ["/api/v1/submit/submission/155087/", "/api/v1/submit/submission/156624/", "/api/v1/submit/submission/163586/", "/api/v1/submit/submission/165003/"], "tags": [], "time": "2026-06-26T15:36:28Z", "title": "Registry and Signature Agent card for Web bot auth", "type": "/api/v1/name/doctypename/draft/", "uploaded_filename": "", "words": null}, {"abstract": "   This draft outlines use cases for authentication for bot clients on\n   the Web, to help inform discussions regarding the scope and intent of\n   the WebBotAuth Working Group.\n", "ad": null, "expires": "2026-10-04T03:12:41Z", "external_url": "", "group": "/api/v1/group/group/1027/", "id": 152837, "intended_std_level": null, "keywords": "[]", "name": "draft-nottingham-webbotauth-use-cases", "note": "", "notify": "", "pages": 11, "resource_uri": "/api/v1/doc/document/draft-nottingham-webbotauth-use-cases/", "rev": "02", "rfc": null, "rfc_number": null, "shepherd": null, "states": ["/api/v1/doc/state/2/", "/api/v1/doc/state/150/"], "std_level": null, "stream": null, "submissions": ["/api/v1/submit/submission/158001/", "/api/v1/submit/submission/158860/", "/api/v1/submit/submission/161841/"], "tags": [], "time": "2026-10-03T07:09:03Z", "title": "Use Cases for Authentication of Web Bots", "type": "/api/v1/name/doctypename/draft/", "uploaded_filename": "", "words": null}, {"abstract": "   Automated agents (\"bots\") represent a large fraction of the traffic\n   to many Web sites.  In some cases, this traffic is desired, in others\n   undesired, and in yet others, desired as long as it remains within\n   certain rate limits.  This memo describes Anonymous Bot\n   Authentication (ABA), a system that allows Web site operators to\n   distinguish wanted from unwanted traffic, while not tying a given\n   request to a specific sender.\n", "ad": null, "expires": "2027-01-20T18:26:31Z", "external_url": "", "group": "/api/v1/group/group/1027/", "id": 155933, "intended_std_level": null, "keywords": "[]", "name": "draft-rescorla-anonymous-webbotauth", "note": "", "notify": "", "pages": 16, "resource_uri": "/api/v1/doc/document/draft-rescorla-anonymous-webbotauth/", "rev": "01", "rfc": null, "rfc_number": null, "shepherd": null, "states": ["/api/v1/doc/state/1/", "/api/v1/doc/state/150/"], "std_level": null, "stream": null, "submissions": ["/api/v1/submit/submission/161981/", "/api/v1/submit/submission/166527/"], "tags": [], "time": "2026-07-19T18:26:31Z", "title": "Anonymous Bot Authentication: Authorization and Rate Limiting for Web Agents", "type": "/api/v1/name/doctypename/draft/", "uploaded_filename": "", "words": null}, {"abstract": "   Automated clients, including Large Language Model (LLM) crawlers and\n   Retrieval-Augmented Generation (RAG) systems, currently lack a\n   deterministic mechanism to verify the canonical identity of a web\n   domain's operator.  This \"Identity Gap\" results in attribution loss\n   and prevents the automated verification of authority and expertise\n   signals.  This document defines the Semantic Anchor: a protocol-level\n   orchestration of a domain-root, machine-readable JSON-LD identity\n   node discoverable via predictable endpoints.  It establishes a stable\n   identity layer and a \"Root of Trust\" for AI-to-site interactions.\n", "ad": null, "expires": "2026-12-07T15:23:19Z", "external_url": "", "group": "/api/v1/group/group/1027/", "id": 157059, "intended_std_level": null, "keywords": "[]", "name": "draft-popov-webbotauth-semantic-anchor", "note": "", "notify": "", "pages": 5, "resource_uri": "/api/v1/doc/document/draft-popov-webbotauth-semantic-anchor/", "rev": "00", "rfc": null, "rfc_number": null, "shepherd": null, "states": ["/api/v1/doc/state/1/", "/api/v1/doc/state/150/"], "std_level": null, "stream": null, "submissions": ["/api/v1/submit/submission/164014/"], "tags": [], "time": "2026-06-05T15:23:20Z", "title": "Identity Anchor for Domain-Root AI Discovery (Semantic Anchor)", "type": "/api/v1/name/doctypename/draft/", "uploaded_filename": "", "words": null}, {"abstract": "   This document describes a method for clients using\n   [HTTP-MESSAGE-SIGNATURES] to advertise their signing keys.\n\n   It defines a key directory format based on JWKS as defined in\n   Section 5 of [JWK], as well as a new HTTP Method Context for in-band\n   key discovery.\n", "ad": null, "expires": "2026-12-28T15:27:45Z", "external_url": "", "group": "/api/v1/group/group/1027/", "id": 157503, "intended_std_level": null, "keywords": "[]", "name": "draft-meunier-webbotauth-httpsig-directory", "note": "", "notify": "", "pages": 15, "resource_uri": "/api/v1/doc/document/draft-meunier-webbotauth-httpsig-directory/", "rev": "00", "rfc": null, "rfc_number": null, "shepherd": null, "states": ["/api/v1/doc/state/4/", "/api/v1/doc/state/150/"], "std_level": null, "stream": null, "submissions": ["/api/v1/submit/submission/164998/"], "tags": [], "time": "2026-07-01T21:55:19Z", "title": "HTTP Message Signatures Directory", "type": "/api/v1/name/doctypename/draft/", "uploaded_filename": "", "words": null}, {"abstract": "   This document describes a protocol for identifying automated traffic\n   using [HTTP-MESSAGE-SIGNATURES].  The goal is to allow automated HTTP\n   clients to cryptographically sign outbound requests, allowing HTTP\n   servers to verify their identity with confidence.\n\n   It defines the Signature-Agent header field for in-band key\n   discovery, a key directory format based on JWKS, and a well-known URI\n   at which that directory is served.\n", "ad": null, "expires": "2027-02-19T17:40:59Z", "external_url": "", "group": "/api/v1/group/group/1027/", "id": 157504, "intended_std_level": null, "keywords": "[]", "name": "draft-meunier-webbotauth-httpsig-protocol", "note": "", "notify": "", "pages": 44, "resource_uri": "/api/v1/doc/document/draft-meunier-webbotauth-httpsig-protocol/", "rev": "02", "rfc": null, "rfc_number": null, "shepherd": null, "states": ["/api/v1/doc/state/4/", "/api/v1/doc/state/150/"], "std_level": null, "stream": null, "submissions": ["/api/v1/submit/submission/167386/", "/api/v1/submit/submission/165002/", "/api/v1/submit/submission/167861/"], "tags": [], "time": "2026-08-19T17:12:45Z", "title": "HTTP Message Signatures for automated traffic", "type": "/api/v1/name/doctypename/draft/", "uploaded_filename": "", "words": null}, {"abstract": "   Web Bot Auth authenticates automated clients to origins using HTTP\n   Message Signatures, with verification keys published in a key\n   directory at a well-known URI.  Current drafts assume that each agent\n   operator hosts its own key directory.  A large and growing population\n   of agents is operated by individuals and small organizations for whom\n   hosting a directory is impractical, and whose legitimate traffic is\n   otherwise indistinguishable from abusive automation.\n\n   This document describes the hosted (multi-tenant) key directory\n   deployment model, in which a registry operator publishes key\n   directories on behalf of many independent agent operators while the\n   operators retain exclusive custody of their private keys.  It\n   analyzes principal mapping, proof of key possession, freshness, and\n   accountability in this model; reports interoperability observations\n   from an independent implementation; and offers operational guidance\n   for hosted directory operators and for verifiers.  It is intended as\n   input to the Web Bot Auth working group's operational and deployment\n   guidance.\n", "ad": null, "expires": "2027-01-20T17:55:31Z", "external_url": "", "group": "/api/v1/group/group/1027/", "id": 158746, "intended_std_level": null, "keywords": "[]", "name": "draft-singh-webbotauth-hosted-directories", "note": "", "notify": "", "pages": 11, "resource_uri": "/api/v1/doc/document/draft-singh-webbotauth-hosted-directories/", "rev": "00", "rfc": null, "rfc_number": null, "shepherd": null, "states": ["/api/v1/doc/state/1/", "/api/v1/doc/state/150/"], "std_level": null, "stream": null, "submissions": ["/api/v1/submit/submission/166525/"], "tags": [], "time": "2026-07-19T17:55:31Z", "title": "Hosted Key Directories for Web Bot Auth", "type": "/api/v1/name/doctypename/draft/", "uploaded_filename": "", "words": null}, {"abstract": "   This document describes a protocol for identifying automated traffic\n   using [HTTP-MESSAGE-SIGNATURES].  The goal is to allow automated HTTP\n   clients to cryptographically sign outbound requests, allowing HTTP\n   servers to verify their identity with confidence.\n\n   It defines the Signature-Agent header field for in-band key\n   discovery, a key directory format based on JWKS, and a well-known URI\n   at which that directory is served.\n", "ad": null, "expires": "2027-03-05T13:13:08Z", "external_url": "", "group": "/api/v1/group/group/2488/", "id": 160852, "intended_std_level": null, "keywords": "[]", "name": "draft-ietf-webbotauth-httpsig-protocol", "note": "", "notify": "", "pages": 44, "resource_uri": "/api/v1/doc/document/draft-ietf-webbotauth-httpsig-protocol/", "rev": "00", "rfc": null, "rfc_number": null, "shepherd": null, "states": ["/api/v1/doc/state/1/", "/api/v1/doc/state/150/", "/api/v1/doc/state/38/"], "std_level": null, "stream": "/api/v1/name/streamname/ietf/", "submissions": ["/api/v1/submit/submission/168426/"], "tags": [], "time": "2026-09-01T13:13:08Z", "title": "HTTP Message Signatures for automated traffic", "type": "/api/v1/name/doctypename/draft/", "uploaded_filename": "", "words": null}]}