Privacy Pass v3: the new privacy bits
This post announces Privacy Pass Extension v3.0, detailing significant refactoring of the browser extension for improved maintainability and extensibility. Key technical changes include implementing the extension in TypeScript, using a module bundler, refactoring the API for cryptographic primitives, and treating provider-specific code as encapsulated modules rather than configuration properties. This modular approach allows for easier integration of future service providers by enabling provider-specific WebRequest API event listeners and moving from configuration files to programmable modularization. The post also discusses the evolution of the Privacy Pass protocol, its standardization at IETF, and future work on metadata to address hoarding attacks, including exploring key rotation as a potential solution.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack