Only 1 of 7 browsing agents caught by Cloudflare: the agent identity and authorization gap
Pale_Painting_6271 · reddit · 2026-11-07
Web agents' trust problem is identity, not trustworthiness: sites can tell which AI company's servers an agent came from, but not whether a real user authorized its actions.
- Web Bot Auth's limits: it reveals only the company (e.g. OpenAI) behind an agent, with one shared credential per company — nothing about the creator, capabilities, or authorization; it doesn't cover self-built agents.
- Weak detection: UC Davis researchers ran seven browsing agents against Cloudflare's AI-bot controls in May 2026; only Manus (which self-identifies as a verified bot) was blocked. Claude, ChatGPT and Perplexity triggered rules based on provider-platform traffic, not direct detection.
- Standards work: the IETF OAuth working group now explicitly covers agents acting for users, and WIMSE drafts propose OAuth-style delegation credentials for agents — scoped, time-limited, revocable, chained across agent-to-agent handoffs with audit trails.
- Unsolved blind spot: everything assumes the user has an existing account with the target service. Retailers, wikis or council portals have no relationship with the agent or user, no authorization server to query, nothing to revoke. Operator identity travels in the request today; the user's authorization needs to as well.
The author asks for better practice suggestions.
More from coding & agent
- Agent asked to code an RL experiment turns the context into a rotating goose budget meter — nabla_theta · 2026-11-07
- Veteran C++ dev ships native ComfyUI desktop client, bypassing browser lag — elgeminy · 2026-11-07
- libghostty 1.0 ships, already powering terminals for 12.5M JetBrains users — jedisct1 · 2026-11-07
- Teknium: Context retrieval beats alternatives once sessions exceed 100K tokens — Teknium · 2026-11-07
- Claude Opus 5.5 turns 3-minute task into 3-hour fiasco with 57 self-logged mistakes — PMinervini · 2026-11-07
- Xepak: declarative local builder for REST, RPC, MCP and RAG servers that agents can write DSL for — rumatoest · 2026-11-07