{"verdict":"pass","summary":"CalDAV methods reach iCloud from this Worker. iCloud can be read directly over CalDAV.","target":"https://caldav.icloud.com/","runtime":"Cloudflare-Workers","colo":"CMH","ranAt":"2026-11-09T21:35:48.825Z","steps":[{"name":"PROPFIND without credentials","ok":true,"status":401,"detail":"Apple answered 401 and asked for Basic credentials: the PROPFIND method travelled through the Workers runtime and the network intact.","headers":{"server":"cloudflare","www-authenticate":"Basic realm=\"MMCalDav\", X-MobileMe-AuthToken realm=\"MMCalDav\"","via":"xrail:icloud-xrail-group174-ext-589fccb766-hbjgx:8301:26R375:grp174,631194250daa17e24277dea86cf30319:777b59bd3bb94d08fcf44462911564c4:usqas5","x-apple-request-uuid":"671ae168-ec8a-497e-9a16-5865251681fe"}},{"name":"REPORT without credentials","ok":true,"status":403,"detail":"Apple's server received the REPORT and answered 403 (Apple's usual answer to an anonymous REPORT at the root): the method got through. The Server header reads \"cloudflare\" only because Cloudflare rewrites it on proxied responses; Apple's own headers identify the responder.","headers":{"server":"cloudflare","via":"xrail:icloud-xrail-group116-ext-85c7677744-ss47m:8301:26R375:grp116,631194250daa17e24277dea86cf30319:c077dded2b88e5089d95c844b45158fd:usqas5","x-apple-request-uuid":"665efc1e-5f68-4f6e-bbb5-39981679a305"}},{"name":"PROPFIND with app-specific password","ok":null,"status":null,"detail":"Skipped: set ICLOUD_USERNAME and ICLOUD_APP_PASSWORD (secrets, or .dev.vars locally) to run the authenticated check."}]}