
4/21/2026 · Thibault Meunier
What this post added
This post discusses the evolution of web protection beyond the 'bots vs. humans' dichotomy. It highlights how emerging AI clients bypass traditional browser-based interactions, disrupting the publisher-user balance. The post details the client-server model and current bot management techniques, which rely on passive and active client signals, as well as server signals. It introduces the 'rate limit trilemma' (decentralized, anonymous, accountable) and argues that the focus should shift to detecting intent and behavior rather than just identifying humans or bots, especially in light of new clients that don't exhibit traditional browser behaviors.