Show HN: Tool to validate your HTTP-message-signatures-directory

Category: security

Tags: http-signatures, bot-auth, security, web-tool, rfc9421

Score: 5.3/10 (Innovation: 5, Technical: 5, Documentation: 3, Utility: 6)

Sitedex's Web Bot Auth key check is a web-based tool that validates HTTP Message Signature key directories (RFC 9421) for bot authentication, helping crawler operators ensure their signing keys are correctly published and secure. It checks for common misconfigurations, including leaked private keys, and provides a companion tool for testing signed requests.

Target audience: backend devs, devops, security engineers, bot developers

Repository: https://sitedex.dev/tools/keycheck

View on Hacker News