top | item 46801496

(no title)

ai_critic | 1 month ago

This is super neat, don't get me wrong, but....

Please, please, please require HTTPS. Dear god.

The network is not secure.

Your example:

```

# Start a discovery server

python -m server.lad_server --name "My Agent" --port 8080

# Discover agents (in another terminal)

python -m client.lad_client --url http://localhost:8080

```

discuss

order

franzvill|1 month ago

Thanks for flagging this! You're absolutely right about network security.

The spec does require TLS - from Section 4.1: > "All HTTP endpoints MUST use TLS 1.2 or higher" > "Clients MUST verify TLS certificates"

The `http://localhost:8080` example is just for local development/demo purposes. In production, all discovery endpoints and AgentCard fetches must use HTTPS.