> Something else I think could happen as a result of this is a web where we verify user/client identities, the same way we currently verify server identities (v

> Something else I think could happen as a result of this is a web where we verify user/client identities, the same way we currently verify server identities (via TLS certificates). The cost of running bots is plummeting. I could forsee a world where sites like Tripadvisor require a client certificate to connect. That certificate could be provided by paid services (to prevent bot spam), or maybe by device manufacturers like Apple, so you get one certificate per device to prevent bot spam. Have client certificates worked in any niche? We now have SSO by Google/Apple/Facebook/X, but those identities are also used by bots.