Web Bot Auth
A JWKS at /.well-known/http-message-signatures-directory publishing usable public verification keys. (site-wide file)
Broken variant
The listed Ed25519 key has a too-short x, so no usable verification key is published.
Catalogued flags
| Flag | Kind | Severity |
|---|---|---|
webBotAuthMalformedDirectory | defect | high |
webBotAuthMissingKeys | defect | high |
webBotAuthInvalidKey | defect | high |
webBotAuthPrivateKeyExposed | defect | high |
webBotAuthWrongMediaType | defect | medium |