Cloudflare

Pwned Passwords Padding (ft. Lava Lamps and Workers)

Mar 4, 2020Junade Ali
Pwned Passwords Padding (ft. Lava Lamps and Workers)
SummaryAI, from the source post

Introduced dynamic padding to the Pwned Passwords API responses using Cloudflare Workers. This padding is generated on a per-request basis to obscure the exact size of API responses, mitigating traffic analysis attacks. The padding consists of randomly generated hash suffixes with a usage count of 0, and is applied to meet a minimum response size and add variable additional padding.

More from the Cache Management trail