@techreport{rescorla-anonymous-webbotauth-01, number = {draft-rescorla-anonymous-webbotauth-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-rescorla-anonymous-webbotauth/01/}, author = {Eric Rescorla and Richard Barnes}, title = {{Anonymous Bot Authentication: Authorization and Rate Limiting for Web Agents}}, pagetotal = 16, year = 2026, month = jul, day = 19, abstract = {Automated agents ("bots") represent a large fraction of the traffic to many Web sites. In some cases, this traffic is desired, in others undesired, and in yet others, desired as long as it remains within certain rate limits. This memo describes Anonymous Bot Authentication (ABA), a system that allows Web site operators to distinguish wanted from unwanted traffic, while not tying a given request to a specific sender.}, }