More devices, fewer CAPTCHAs, happier users
Aug 12, 2021Wesley Evans, Tara Whalen
Summary
This post details the expansion of Cloudflare's Cryptographic Attestation of Personhood experiment to include support for biometric authenticators (Face ID, Windows Hello, Android Biometric Authentication) and FIDO Alliance certified hardware tokens. It also introduces the use of Zero Knowledge Proofs (ZKP) to enhance privacy by verifying the existence of a valid security key without disclosing additional information. The post highlights the privacy-preserving nature of the WebAuthn API and the on-device processing of biometric data.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack