3 chapters across the catalog
The hosts debate the merits of requiring signed requests for HLS media to block abusive bots. John Spurlock notes that user-agents are unreliable signals and that proper identification should happen via authorization headers, though he questions if podcast media should ever be filtered or "closed."
The hosts clarify that the HTTP signing proposal is about verification, not closing the ecosystem. It would allow a CDN to distinguish between a legitimate app like Overcast and a bot spoofing its user-agent, enabling more intelligent blocking of abusive traffic.
Dave Jones describes his daily battle with bot traffic on the Podcast Index, often resulting in manual rate limiting and the use of 429 "Too Many Requests" error codes. He notes that most abusive traffic disappears once it is blocked, though some legitimate developers reach out to fix their code.
