Cloudflare Wallets: the programmable wallet for the agentic Internet(blog.cloudflare.com) |
Cloudflare Wallets: the programmable wallet for the agentic Internet(blog.cloudflare.com) |
This was always a vaguely desired thing, but the implementation details was always a form of OIDC federation which is mind-numbingly complex and not worth the hassle. Just shove an api key or a shared secret of some sort and move on. Only accounts that are very high value targets for attacks (cloud infra accounts, CIs infra, billing, and things they interact with implement OIDC federation. But that awesome Thai recipe blog has no chance of implementing something like that.
With Agents driving internet traffic, there is a desire to have identities for them. And since it’s inherently easy for them to leak these identities (look at the million sandbox solutions that all share the same dumb goal of “protect the API Key or password”), having short lived tokens for everything (AWS IAM or Azure Managed Identity like) simplifies the entire process. Agreeing on the single IdP was the problem, there are like 40 (Google, Apple, Microsoft, Facebook, Twitter, even GitHub, and Amazon have SSO not to mention all the regional specific ones)
There is a legitimate need for that, and it looks like cloudflare figured if they are that “internet agent identity provider”, then there is a lot of power and control over the internet and AI use in general.
How is https://cloudflare.pay resolving?
Without domain validation, what is this user's intention other than fraud/impersonation?
I've already got an active impersonator running a website under my brand name and confusing my customers.
At the same time, something tells me what is coming isn't going to be as recognizable as these products build for.
The only thing I see that’s unique for “agents” when it comes to cloud services is finally paying attention to provisioning speed and developer iterations.
Last year, for the first time in my career, I heard c-suite exec concerned about projects with multi-hour long CI or deployments that take hours because “agents can’t be successful” as they need to iterate way more.
If so, why not interact with an exchange?
Also, not sure how many merchants out there accept stablecoins. Probably not many.
- permission-ed system when we’ve got lightning and super low cost blockchains. They could even run their own L2.
- I am typing my name in a cafe and hear some clacking sounds. I was puzzled there for a full minute to where the sound was coming from. Who thought this is a good idea?
- So I finish the reservation and there is actually no product yet?
It makes sense that they're leaning into an all-in-one platform play, i.e. if you use DOs, you might as well use our wallet/sandbox/AI gateway/etc. too.
Alipay and Coinbase already have similar offerings in market.
Web Security is Too Hard