Evolution of Privacy Pass at Cloudflare
summary
Privacy Pass is now a production authentication layer used to reduce challenges and preserve anonymity: Apple’s Private Relay integration yields 92% fewer challenges and users with tokens are 42% more likely to pass, with challenge solve time roughly halved. The protocol starts in 2017, adds VOPRF/VRF crypto and interactivity, sees half a million extension downloads, and has post‑quantum experiments. Cloudflare publishes a new JavaScript library compatible with the latest draft, supports interactive and non‑interactive attestations, and aims to open more attester components.
AI-written summary · about
chapters (8)
- 0:00Privacy Pass intro
- 1:32User verification with Privacy Pass
- 3:21Initial protocol and limits
- 7:13Key milestones in development
- 7:55Deployments and use cases
- 9:21Metrics and Private Access Tokens
- 10:43Future directions
- 13:32Platform integration and governance
related talks
25mPrivacy Pass: A Lightweight Zero Knowledge Protocol Designed for the Web
19mBuilding Privacy Into the Internet
20mEnterprise passkey deployment updates and learnings from passkey managers
28mVaultPass: Enabling Teams to Share Secrets Confidentially
45mPast Time for Passkeys
23mOur future without passwords
37mAuthentication in 2026: A guide to passkeys, digital credentials and more
24mSeamless and Secure: The rise of payment passkeys