Brave taking cryptocurrency donations “for me” without my consent

How would it work otherwise? How would we automate consent from the relevant webmaster, website owner, etc? It seems like we wouldn't be able to successful communicate with the principal in many or most cases.

I've thought of something vaguely similar – documenting website behavior and optimization opportunities without the involvement of publishers. It would be nice to have a known online resource/repository for this, kind of like the security vulnerability communication website that I can't remember at the moment.

It wouldn't. Nobody owes you automated consent or anything.

> How would it work otherwise?

Who says it has to?

> How would we automate consent from the relevant webmaster, website owner, etc?

Same way Let's Encrypt does for SSL - put a file in `.well-known` indicating you want it and consent to it.