Don't many botnets use compromised machines now? Protocol level mitigations wouldn't help that would it?