Website Security & Threat Management
Privacy Pass v3: the new privacy bits

Privacy Pass v3: the new privacy bits

10/12/2021 · Pop Chunhapanya, Armando Faz-Hernández, Sofía Celi

What this post added

This post announces Privacy Pass Extension v3.0, detailing significant refactoring of the browser extension for improved maintainability and extensibility. Key technical changes include implementing the extension in TypeScript, using a module bundler, refactoring the API for cryptographic primitives, and treating provider-specific code as encapsulated modules rather than configuration properties. This modular approach allows for easier integration of future service providers by enabling provider-specific WebRequest API event listeners and moving from configuration files to programmable modularization. The post also discusses the evolution of the Privacy Pass protocol, its standardization at IETF, and future work on metadata to address hoarding attacks, including exploring key rotation as a potential solution.

Read the original post ↗