Bot Traffic Mitigation

[CollinsOmwoyo]

Inquiry: AI & Bot Traffic Mitigations in TLS 1.3+
As AI-driven bot traffic increases, many web security measures rely on TLS fingerprinting (JA3), behavioral detection, and rate limiting. However, attackers are also using AI to bypass these defenses.
Questions

1. Are there any ongoing improvements in TLS 1.3+ that directly mitigate AI-generated bot traffic?
2. Are there discussions on integrating Proof-of-Work (PoW) challenges at the handshake level?
3. How is OpenSSL handling adaptive congestion control in response to AI-driven traffic surges?

Would love to hear insights from the community.