Since 20:25 UTC every HTTP(S) check from all 18 probes is signed with Web Bot Auth: HTTP Message Signatures (RFC 9421) with Ed25519, one key per probe, sent in the Signature-Agent, Signature-Input and Signature headers. The public keys are in a signed directory at /.well-known/http-message-signatures-directory, so a site owner or a CDN can check that a request really comes from PingWise rather than from someone copying our User-Agent. Nothing changes in how sites are checked, and the probe page lists it next to the addresses and the User-Agent. Allow-listing by IP, as described there, still works as before.
Changelog ·
Our checks are signed (Web Bot Auth)
Every HTTP(S) check from our probes now carries a cryptographic signature that site owners and CDNs can verify against our public key directory.