3 ms·
> It uses advanced cryptography to do this without creating any new tracking vectors. Sounds like something which is designed to create hard to detect tracking
by simiones 3y ago
> It uses advanced cryptography to do this without creating any new tracking vectors.
Sounds like something which is designed to create hard to detect tracking vectors.
- kentonv 3y agoNote that Privacy Pass is not a Cloudflare product, it's an open protocol which Cloudflare supports. https://datatracker.ietf.org/doc/charter-ietf-privacypass/ https://datatracker.ietf.org/doc/charter-ietf-privacypass/
- ignoramous 3y agoBlog: https://blog.cloudflare.com/privacy-pass-the-math/ https://blog.cloudflare.com/privacy-pass-the-math/ (older) Design: https://privacypass.github.io/protocol/ https://privacypass.github.io/protocol/ PATs: https://blog.cloudflare.com/eliminating-captchas-on-iphones-and-macs-using-new-standard/ https://blog.cloudflare.com/eliminating-captchas-on-iphones-...
- simiones 3y agoSo this is even more insiduos, and an interesting way for Apple, Google, and MS to pay Cloudflare to use its dominating market position to help safeguard them from other incumbents: you either work to get your devices approved in this scheme, or your users get more Cloudflare CAPTCHAs preventing them from having a nice web experience. All in the name of "privacy" and "security". Though of course, the only security that is served here is the ad network's revenue stream, who are the only ones who really care if a real device or a bot is accessing their services. For most other cases, a DDoS is a DDoS regardless of it being initiated by actual users (e.g. an HN hug of death) or by a bot network.