Web Bot Auth vs Visa TAP: How to Verify AI Agents

Copy the signed request from Visa's Trusted Agent Protocol spec into a unit test, run it through an Ed25519 verifier, and it fails. Mastercard's Agent Pay example fails too. Both reuse a signature from an IETF test vector that signs a different message, and both set a 60-minute validity window that breaks the 8-minute limit each network tells... Weiterlesen: Web Bot Auth vs Visa TAP: How to Verify AI Agents