
6/8/2022 · Reid Tatoris, Maxime Guerreiro
What this post added
Introduced Private Access Tokens (PATs) as a new method for validating human users without CAPTCHAs. PATs leverage an open standard (extension of Privacy Pass protocol) and involve collaboration between device vendors (Attesters) and token issuers (like Cloudflare) to generate anonymous, unforgeable tokens. This significantly improves privacy by validating device authenticity without collecting or storing sensitive user data, and enhances the user experience by removing CAPTCHAs, especially on mobile and API contexts.