# Web Bot Auth verification accepts the dictionary Signature-Agent, and recognises OpenWAF Browsers

> Sites behind OpenWAF now verify both forms of the Signature-Agent header, and requests signed by OpenWAF Browsers are classified as the verified bot openwaf-browsers.

The edge verified only the original form of `Signature-Agent`, a quoted string signed as `"signature-agent"`. It now also verifies the dictionary form of the current Web Bot Auth draft, `Signature-Agent: sig1="https://…"` signed as `"signature-agent";key="sig1"`. A request is attributed only to the member its signature covers; unsigned members and members with parameters are ignored.

The [bot catalog](https://developers.openwaf.dev/ai-crawl-control/bot-catalog/) now includes the Web Bot Auth directory of OpenWAF Browsers. Until today, its signed requests were counted as unverified automation on sites behind OpenWAF; they now appear as the verified bot `openwaf-browsers` (category AI user agent) in the reports, and you can use that id in [per-bot overrides](https://developers.openwaf.dev/ai-crawl-control/policy/#overrides).