Pwned Passwords Padding (ft. Lava Lamps and Workers)

What this post added

Introduced dynamic padding to the Pwned Passwords API responses using Cloudflare Workers. This padding is generated on a per-request basis to obscure the exact size of API responses, mitigating traffic analysis attacks. The padding consists of randomly generated hash suffixes with a usage count of 0, and is applied to meet a minimum response size and add variable additional padding.