I'd assume the HEADERs would be the same, e.g. basic stuff like UAS could be the same, or more low-level like Accept-* headers.
Note that this doesn't seem like a DDoS focused on high-bandwidth but rather focused on causing application load by triggering some server action and abusing the CPU/RAM, etc. In this case, Level7 analysis, is very effective and usually simple.
I think I am going to start playing with that idea. Or join you, if you're into it. I would love to be part of such a non-profit. My wife, a doctor, was very excited at the research use-cases this could help her with.
What's wrong with NFC?
I thought the goal was to walk away from external tokens like SecureID - far more secure but bulky. At least I can wear an NFC authenticator as a ring.
