Website Security & Threat Management
Private Access Tokens: eliminating CAPTCHAs on iPhones and Macs with open standards

Private Access Tokens: eliminating CAPTCHAs on iPhones and Macs with open standards

6/8/2022 · Reid Tatoris, Maxime Guerreiro

What this post added

Introduced Private Access Tokens (PATs) as a new method for validating human users without CAPTCHAs. PATs leverage an open standard (extension of Privacy Pass protocol) and involve collaboration between device vendors (Attesters) and token issuers (like Cloudflare) to generate anonymous, unforgeable tokens. This significantly improves privacy by validating device authenticity without collecting or storing sensitive user data, and enhances the user experience by removing CAPTCHAs, especially on mobile and API contexts.

Read the original post ↗