On the Security of Rate-limited Privacy Pass

ePrint Report: On the Security of Rate-limited Privacy Pass

Hien Chu, Khue Do, Lucjan Hanzlik

The privacy pass protocol allows users to redeem anonymously issued cryptographic tokens instead of solving annoying CAPTCHAs. The issuing authority verifies the credibility of the user, who can later use the pass while browsing the web using an anonymous or virtual private network. Hendrickson et al. proposed an IETF draft (privacypass-rate-limit-tokens-00) for a rate-limiting version of the privacy pass protocol, also called rate-limited Privacy Pass …

authority browsing captchas cryptographic eprint report pass privacy protocol rate report security the web tokens web