4 ms·

Here ya go: https://help.kagi.com/kagi/privacy/privacy-pass.html https://help.kagi.com/kagi/privacy/privacy-pass.html

tamimio 5mo ago
Is it open source? Audited? It is like back to how vpn services try to establish some sort of a trust relationship, which imo is more dangerous to have a false sense of trust than none, I prefer no trust at all, zero trust, especially when the service is SaaS in the US.
- MostlyStable 5mo ago
  Man, if only the article I had posted had answered those questions. That sure would be nice https://blog.kagi.com/kagi-privacy-pass https://blog.kagi.com/kagi-privacy-pass https://github.com/kagisearch/privacypass-extension https://github.com/kagisearch/privacypass-extension https://news.ycombinator.com/item?id=43040521 https://news.ycombinator.com/item?id=43040521 Yes and yes, since you you apparently aren't capable of reading for yourself -edit- I decided I didn't like the tenor of the comments I made. This tone serves nothing but to degrade the quality of online discourse so I will say this: I don't personally have the technical chops to verify the claims that Kagi is making. And no one should blindly trust the statements of faceless companies. For me personally, the claims, discussion in the linked hacker news post, and the direction of Kagi's economic incentives are enough to satisfy me personally. Nothing says that someone else must be satisfied by that level of evidence, which is definitely not proof positive. However, I also very strongly believe that the level of paranoia that it takes to decide that all of that is not enough would also 100% disbar one from using google, even without an account. I do not think that one can honestly say that, with the evidence we have on hand, that Kagi is less privacy protecting that google. They may not be privacy protecting enough, whatever standard that is for someone, but they are absolutely doing more than google.
  - tamimio 5mo ago
    Great, Can I host it? A memory injection server side exploit can leak/track/ID any person of interest. This is Signal server way all over again. If I can host it, AND the payments in something like monero for the server that aggregates the queries, we have the foundation of privacy, not perfect as there are a lot of other stuff to go through, but good starting point.
    - thallium205 5mo ago
      So you think being logged out of Google will keep you more anonymous than this Kagi Privacy Pass setup?
      - tamimio 5mo ago
        Do I think using a search engine that doesn’t require an account and I can get the queries through an aggregator is more private than another that has an account/token linked back to you? Yes.
  - smgpie 5mo ago
    Just curious, with this privacy pass setup, how do I know that the server generated "auth token" is not actually linked to my account somehow?
- promiseofbeans 5mo ago
  It should also work with the Cloudflare privacy pass extension [0] FWIW, since Kagi just implemented RFC 9576 [1] [0]: https://blog.cloudflare.com/privacy-pass-standard/ https://blog.cloudflare.com/privacy-pass-standard/ [1]: https://www.rfc-editor.org/rfc/rfc9576 https://www.rfc-editor.org/rfc/rfc9576
- mcfly_c-137 5mo ago
  Here‘s an in-depth review from 03/2025 where Kagi and Metager are compared by german IT-Sec expert Mike Kuketz and his team. No privacy-related concerns were raised back then. It is a german blog (sorry, couldn’t find an EN-version), and a very trustworthy source for me. https://www.kuketz-blog.de/besser-als-google-bezahlsuchmaschinen-im-test/#top https://www.kuketz-blog.de/besser-als-google-bezahlsuchmasch...

Is it open source? Audited? It is like back to how vpn services try to establish some sort of a trust relationship, which imo is more dangerous to have a false sense of trust than none, I prefer no trust at all, zero trust, especially when the service is SaaS in the US.

MostlyStable 5mo ago
Man, if only the article I had posted had answered those questions. That sure would be nice https://blog.kagi.com/kagi-privacy-pass https://blog.kagi.com/kagi-privacy-pass https://github.com/kagisearch/privacypass-extension https://github.com/kagisearch/privacypass-extension https://news.ycombinator.com/item?id=43040521 https://news.ycombinator.com/item?id=43040521 Yes and yes, since you you apparently aren't capable of reading for yourself -edit- I decided I didn't like the tenor of the comments I made. This tone serves nothing but to degrade the quality of online discourse so I will say this: I don't personally have the technical chops to verify the claims that Kagi is making. And no one should blindly trust the statements of faceless companies. For me personally, the claims, discussion in the linked hacker news post, and the direction of Kagi's economic incentives are enough to satisfy me personally. Nothing says that someone else must be satisfied by that level of evidence, which is definitely not proof positive. However, I also very strongly believe that the level of paranoia that it takes to decide that all of that is not enough would also 100% disbar one from using google, even without an account. I do not think that one can honestly say that, with the evidence we have on hand, that Kagi is less privacy protecting that google. They may not be privacy protecting enough, whatever standard that is for someone, but they are absolutely doing more than google.
- tamimio 5mo ago
  Great, Can I host it? A memory injection server side exploit can leak/track/ID any person of interest. This is Signal server way all over again. If I can host it, AND the payments in something like monero for the server that aggregates the queries, we have the foundation of privacy, not perfect as there are a lot of other stuff to go through, but good starting point.
  - thallium205 5mo ago
    So you think being logged out of Google will keep you more anonymous than this Kagi Privacy Pass setup?
    - tamimio 5mo ago
      Do I think using a search engine that doesn’t require an account and I can get the queries through an aggregator is more private than another that has an account/token linked back to you? Yes.
- smgpie 5mo ago
  Just curious, with this privacy pass setup, how do I know that the server generated "auth token" is not actually linked to my account somehow?
promiseofbeans 5mo ago
It should also work with the Cloudflare privacy pass extension [0] FWIW, since Kagi just implemented RFC 9576 [1] [0]: https://blog.cloudflare.com/privacy-pass-standard/ https://blog.cloudflare.com/privacy-pass-standard/ [1]: https://www.rfc-editor.org/rfc/rfc9576 https://www.rfc-editor.org/rfc/rfc9576
mcfly_c-137 5mo ago
Here‘s an in-depth review from 03/2025 where Kagi and Metager are compared by german IT-Sec expert Mike Kuketz and his team. No privacy-related concerns were raised back then. It is a german blog (sorry, couldn’t find an EN-version), and a very trustworthy source for me. https://www.kuketz-blog.de/besser-als-google-bezahlsuchmaschinen-im-test/#top https://www.kuketz-blog.de/besser-als-google-bezahlsuchmasch...