Cloudflare's Signed Agents: A Path to a Closed Web?
Cloudflare's new "signed agents" system, pitched as a safety measure, is argued to be a dangerous path towards a closed web. The system functions like an allowlist, deciding which agents can access the web, contradicting the open nature of the internet. The author advocates for open, portable, and company-independent authentication based on verifiable chains of delegation and request-level proof, rather than a single company's control. The article draws parallels to historical events, highlighting how open standards consistently beat closed plugins, and calls for an open, verifiable, and decentralized authentication system to manage the increasing number of web agents, ensuring the openness and innovation of the internet. The author even offers to open-source a first cut of their proposed solution.