Proposal for every request from bots to be signed by a private key owned by its provider. This way, every origin can validate the service identity. - View it on GitHub