Users represented on the internet by a User Agent. In this context a user agent is expected to fairly represent the user's intent. Client applications from any of the providers or relying parties are identified as User Agents in the HTTP header but cannot be expected to fairly represent the user's intent.
- The user agent string in the HTTP header contains an identifier of the user agent that is designed primarily to help the web site to create an web page that is pleasingly rendered by the user agent.
- The User-Agent string format is currently specified by section 5.5.3 of HTTP/1.1 Semantics and Content.
- Some software and hardware agents representing the user on the internet may seek to have more specific identifiers and even health or attestation certificates to show their reliability.[
- A strong identity of the user agent depends on strong security of the hardware device available from cryptographic processes like the TPM, Secure Boot or other device health metrics.