Bot Verification

Blueprint illustration of an HTTP request sealed with an Ed25519 signature stamp and a Google-Agent label, representing Web Bot Auth verification of AI agent traffic.

Google's Web Bot Auth Test Leaves Most AI Agent Requests Unsigned

Google started testing Web Bot Auth on May 5, 2026, an experimental protocol that uses HTTP Message Signatures (RFC 9421) to cryptographically verify requests from AI agents. Only a subset of Google-Agent traffic is signed today, and Google still tells publishers to keep falling back to IP, reverse DNS, and