3 ms·

So "Privacy" Pass effectively generates a unique token for every user? That results in trivial tracking again, one of the main points of using VPNs, Tor or what

So "Privacy" Pass effectively generates a unique token for every user? That results in trivial tracking again, one of the main points of using VPNs, Tor or whatever.

StavrosK 8y ago
The tokens can't be correlated with a user.
- tastroder 8y ago
  From the linked page "Privacy Pass uses elliptic curve cryptography to generate 'anonymous' tokens after a single CAPTCHA page is solved." In any case - privacy implications aside - having to install an extension to get around their risk assessment algorithm going wrong seems like placing the burden in very much the wrong place. edit: was wrong about who created the extension
  - StavrosK 8y ago
    PrivacyPass is not their thing: https://privacypass.github.io/ https://privacypass.github.io/ They run a service that shows high-risk visitors (or whom they deem high-risk) a challenge. They support a third-party extension that lets you vouch for yourself on other websites anonymously. The alternative is that they don't support it. The other things they do are debatable, but this is a good thing.
    - tastroder 8y ago
      Oh, thanks for pointing that out, totally missed that part! In that case, at least it's anonymous, yeah.
      - StavrosK 8y ago
        Yeah, in my view, it's nice that they're supporting a published way of anonymously vouching for myself. Maybe it's less than awesome that every visitor from Romania (as an arbitrary example) is considered a criminal, but supporting PrivacyPass is a nice move.