3 ms·
https://developers.google.com/privacy-sandbox/protections/private-state-tokens https://developers.google.com/privacy-sandbox/protections/pr... Private State To
by soared 3y ago
https://developers.google.com/privacy-sandbox/protections/private-state-tokens https://developers.google.com/privacy-sandbox/protections/pr...
Private State Tokens enable trust in a user's authenticity to be conveyed from one context to another, to help sites combat fraud and distinguish bots from real humans—without passive tracking.
An issuer website can issue tokens to the web browser of a user who shows that they're trustworthy, for example through continued account usage, by completing a transaction, or by getting an acceptable reCAPTCHA score.
A redeemer website can confirm that a user is not fake by checking if they have tokens from an issuer the redeemer trusts, and then redeeming tokens as necessary.
Private State Tokens are encrypted, so it isn't possible to identify an individual or connect trusted and untrusted instances to discover user identity.
- Tadpole9181 3y agoThis system clearly and trivially deanonymizes the internet. Even worse than a centralized system, it uses a simple "just trust me bro" mentality that issuers would never injure users for personal gain and would never keep logs or have data leaks, which would expose the Internet traffic of a real person.