Privacy Pass will unblind the tokens and store them for future use. If the solution is valid, the provider will sign the blinded tokens and return them to the client. These tokens will be cryptographically blinded and then sent to the challenge provider. When an internet challenge is solved correctly by a user, Privacy Pass will generate a number of random nonces that will be used as tokens. As such, Privacy Pass is safe to use for those with strict anonymity restrictions. The protocol is exceptionally fast and guarantees privacy for the user. We use a privacy-preserving cryptographic protocol based on ‘Verifiable, Oblivious Pseudorandom Functions’ (VOPRFs) built from elliptic curves to enforce unlinkability. The blind signing procedure ensures that passes that are redeemed in the future are not feasibly linkable to those that are signed. For example, Privacy Pass is supported by Cloudflare to enable users to redeem passes instead of having to solve CAPTCHAs to visit Cloudflare-protected websites.
In short, the extension receives blindly signed ‘passes’ for each authentication and these passes can be used to bypass future challenge solutions using an anonymous redemption procedure. solving an internet challenge) to authenticate to a service. In particular, Privacy Pass is suitable for cases where a user is required to complete some proof-of-work (e.g. Privacy Pass interacts with supporting websites to introduce an anonymous user-authentication mechanism. See below and in the FAQ for more details. Oct 2019: Version 2.0 of the extension is now available in Chrome and Firefox!Īpril 2018: “ Privacy Pass: Bypassing Internet Challenges Anonymously” accepted to PETS 2018. All contributions are welcome! See the GitHub page for more details.
Oct 2020: The Privacy Pass protocol is now in the process of being standardised by the IETF in the privacypass working group. Privacy Pass is a browser extension with the aim of making the internet
0 kommentar(er)
