Forget IPs: Using Cryptography to Verify Bot and Agent Traffic in the Age of AI