Message Signatures are now part of our Verified Bots Program, simplifying bot authentication

What this post added

Introduced integration of HTTP Message Signatures into the Verified Bots Program, simplifying enrollment for bots that cryptographically sign requests. This allows for faster approval of bots and provides site owners with more accurate identification of trusted bot traffic. Cloudflare will automatically validate signatures on the edge, marking verified traffic for use in Bot Management and WAF rules. Open-source libraries in Rust and TypeScript are provided to facilitate Message Signature generation. The post also details the technical steps for bots to become verified using Message Signatures and how site owners can leverage the `cf.verified_bot_category` field for WAF and Rate Limiting rules. It also outlines the future direction of Web Bot Auth and its standardization.