AgenticReadiness ยท test site

← Trust

Web Bot Auth

A JWKS at /.well-known/http-message-signatures-directory publishing usable public verification keys. (site-wide file)

โœ“ correct implementation โœ— broken implementation

Broken variant

The listed Ed25519 key has a too-short x, so no usable verification key is published.

Defect metrics

webBotAuthMalformedDirectory
webBotAuthMissingKeys
webBotAuthInvalidKey
webBotAuthPrivateKeyExposed