>3. Register your bot and key directory

Register with CF is the specific part I object to. Of all of the numerous hazards here centralizing the registration with CF is most clearly problematic. This part of the spec could have easily been an additional header linking to key data.

▲

bobbiechen 3 days ago | parent [-]

Good news - this part of the spec is literally an additional header linking to key data: https://datatracker.ietf.org/doc/html/draft-meunier-http-mes... .

Cloudflare is doing this registration as part of their "verified" program, which gives special treatment to bots/agents who go through the process. That's a Cloudflare-specific feature, not part of the spec.

	▲	palmfacehn 3 days ago \| parent [-]
		Nice catch. Even if we like the standard, the specific implementation can have problems. MSIE, extend and embrace are similar examples.