[Pepp38]

Interesting read. What stood out to me is that this feels less like a detection problem and more like a cost-shaping one.

Sec-Fetch and Client Hints aren’t decisive on their own, but they’re hard to fake consistently across layers and over time, which is where the real value seems to be.

Curious whether you see these headers as a durable signal, or more as something that will need regular rotation as automation frameworks adapt.