All Topics
All Topics
Technology
Technology
AI
AI
Business
Business
Entertainment
Entertainment
News
News
Programming
Programming
Science
Science
Design
Design
Environment
Environment
Finance
Finance
Crypto
Crypto
Politics
Politics
Sports
Sports
Education
Education
Gaming
Gaming
Art
Art
Music
Music
Health
Health
Security
Security
Books
Books
Food
Food
Travel
Travel
Personal
Personal
Bluesky
Twitter

Mozilla's PACT: A technical deep dive into anonymous credentials as a CAPTCHA replacement for the open web

By

By Dennis Jackson

15d ago· 20 min readenInsight
technologyprogramming

Summary

Mozilla introduces PACT (Privacy-preserving Anonymous Credentials for the web), a new initiative designed to replace CAPTCHAs and bot detection systems that currently block privacy-preserving browsers. The article provides a deep technical dive into the problem space — where legitimate users using private windows, VPNs, or anti-fingerprinting tools are increasingly blocked by registration walls and CAPTCHAs — and Mozilla's proposed design for anonymous credential systems that can verify human users without compromising privacy. It covers the cryptographic foundations, design trade-offs, and remaining challenges in building a web where openness and privacy can coexist with bot mitigation.

Source

Hacker NewsMozilla's PACT: A technical deep dive into anonymous credentials as a CAPTCHA replacement for the open webhacks.mozilla.org

Key quotes

· 3 pulled
Browse a news site in a private window. Shop at a major retailer with a VPN. Visit a video streaming platform with anti-fingerprinting defenses tuned up. You'll see the same responses: registration walls, block pages, and endless CAPTCHAs.
The message is clear: if we think you might be a bot, you're not welcome.
Here we take a deeper look at the problem space, the design we're proposing, and the problems still left to solve.
Snippet from the RSS feed
A deeper look at PACT: a new initiative to tackle the rising tide of CAPTCHAs on the web whilst keeping the web open and preserving user's privacy.

You might also wanna read

Cloudflare, Mozilla, Google, Microsoft, and Shopify team up on PACT, a CAPTCHA-free web verification protocol

Cloudflare has announced PACT (Private Access Control Tokens), a new browser-based protocol developed with Mozilla, Google, Microsoft, and S

linuxiac.com·14d ago

Cloudflare partners with Chrome, Edge, and Firefox on privacy-preserving bot detection protocol

Cloudflare has partnered with Google Chrome, Microsoft Edge, and Mozilla Firefox to develop Private Access Control Tokens (PACTs), a privacy

theregister.com·15d ago

Keeping the web open and private in the bot era

Mozilla·15d ago

Keeping the web open and private in the bot era

Mozilla·15d ago

Keeping the web open and private in the bot era

Mozilla·15d ago

Keeping the web open and private in the bot era

Mozilla·15d ago

Mozilla researchers demonstrate prompt injection attack on AI coding agents like Claude Code

Mozilla's 0DIN researchers have demonstrated a proof-of-concept attack that exploits indirect prompt injection in AI-powered coding agents l

cybersecuritynews.com·3d ago

Mozilla researchers demonstrate indirect prompt injection attack on AI coding agents via GitHub repositories

Mozilla's Zero Day Investigative Network (0DIN) has disclosed a proof-of-concept attack that uses indirect prompt injection to compromise AI

helpnetsecurity.com·8d ago

Comments

Sign in to join the conversation.

No comments yet. Be the first.