Issues

• http-message-sig: trailing "#" in the target URI ends up in @path / @query

  cloudflare/web-bot-auth#194 · Filter by author FearmessOp opened on Nov 10, 2026

• [bug]: caddy-plugin rejects valid Signature-Agent member signatures because of httpsig-go; switch to yaronf/httpsign?

  cloudflare/web-bot-auth#189 · Filter by author KonstantinMirin opened on Nov 6, 2026

• TypeScript verify rejects a signature without alg; the Rust verifier (#157) and draft §5.2 accept it

  cloudflare/web-bot-auth#172 · Filter by author femi-alla opened on Oct 31, 2026

• Update Rust and Typescript libraries to draft-ietf-webbotauth-httpsig-protocol-01

  cloudflare/web-bot-auth#171 · Filter by author thibmeu opened on Oct 29, 2026
  1

• Key directory alg: the drafts name HTTP Signature Algorithms values, and verifierFromJWK accepts only JOSE values

  cloudflare/web-bot-auth#168 · Filter by author KonstantinMirin opened on Oct 19, 2026

• Let verify() callers require coverage before key lookup, and export the strict field parser

  cloudflare/web-bot-auth#165 · Filter by author KonstantinMirin opened on Oct 18, 2026

• http-signature-directory: check Content-Digest, a future created, and content-digest coverage (Appendix B.1)

  cloudflare/web-bot-auth#164 · Filter by author KonstantinMirin opened on Oct 18, 2026

• Signature-Agent parsers accept an http directory member

  cloudflare/web-bot-auth#162 · Filter by author KonstantinMirin opened on Oct 18, 2026

• TypeScript should support validating multiple signatures and filtering by label

  enhancement
  cloudflare/web-bot-auth#102 · Filter by author thibmeu opened on Jun 29, 2026

• Caddy plugin example: Provision swallows directory-fetch errors (nil-validator panic) and only ever loads the first key

  cloudflare/web-bot-auth#88 · Filter by author joeblew999 opened on Jun 4, 2026
  1

  

• No support for ECDSA P-256

  enhancement
  cloudflare/web-bot-auth#71 · Filter by author SegalMan opened on Feb 15, 2026
  3

• Verification website should use keyid to select key from the directory

  enhancement
  Feature

  cloudflare/web-bot-auth#58 · Filter by author thibmeu opened on Sep 26, 2025

• PQC signature

  cloudflare/web-bot-auth#12 · Filter by author loganaden opened on May 23, 2025
  2

• Extend HTTP field support in http-message-sig

  enhancement
  Task

  cloudflare/web-bot-auth#11 · Filter by author thibmeu opened on May 22, 2025
  1