33How can a website tell that a request really comes from a specific AI agent or crawler? Explain signed requests and Web Bot Auth.▼mediumNewCloudflareGoogleOpenAI◆ premiumA user agent string is a claim anyone can type. A signature over the request is a claim only the key holder can make. The interesting part is what that signature still does not tell the site.Open full answer →
45Your agent will call other companies' agents over the A2A protocol. What are the security risks, and what does a signed Agent Card prove?▼hardNewGoogleMicrosoftSalesforce◆ premiumA2A standardises how agents find and talk to each other. It does not decide who to trust, what to share or what to believe, and those three decisions are the answer.Open full answer →