An agent's identity now travels in the request headers
Signed requests are replacing IP ranges and user-agent strings as the way automated clients identify themselves. The signature names the platform, not the person, and payment and card networks are extending it toward the consumer.