Why this week matters: Bots scrape prices, credential-stuff accounts, abuse APIs, and skew analytics. Bot detection is a multi-signal problem — no single signal is reliable. This week you build a scoring system that aggregates HTTP fingerprinting, TLS fingerprinting, session behavior, and IP reputation.
Background in this wiki: HTTPS guide Ch 12 (security across the lifecycle) and Ch 21 (rate limiting and abuse controls). Security in Depth: Chapter 40D (bots and edge enforcement) and Chapter 74 (abuse and fraud).