Website Security & Threat Management
Forget IPs: using cryptography to verify bot and agent traffic

Forget IPs: using cryptography to verify bot and agent traffic

5/15/2025 · Thibault Meunier, Mari Galicer

What this post added

Introduces HTTP Message Signatures and request mTLS as new cryptographic mechanisms for verifying legitimate bot and AI agent traffic, moving beyond traditional user agent and IP address validation. Details the implementation of these standards, including the generation and validation of signatures, and provides code examples for developers.

Read the original post ↗