AI 产品解读Privacy Pass anonymous token client that obtains unlinkable cryptographic tokens from attesters to present to websites supporting the PrivateToken protocol
Enables users to prove they are human to Cloudflare-protected websites without compromising privacy—avoids repeated CAPTCHAs and prevents tracking across sites through anonymous, unlinkable tokens
1. User visits a website that supports Privacy Pass and sends a PrivateToken WWW-Authenticate challenge header. 2. The extension detects the challenge and opens a new tab to the Cloudflare Turnstile attester. 3. User solves the attestation challenge (proves they are human). 4. The extension receives an anonymous cryptographic token from the attester. 5. The token is automatically included in subsequent requests to the website, proving the user is human without linking to their identity.
Intercepts WWW-Authenticate PrivateToken challenges from supported websitesOpens attester challenge tab (Cloudflare Turnstile) to obtain cryptographic tokensAutomatically redeems anonymous tokens to bypass bot-detection without revealing identityConfigurable attester URLs and development/demo/production modes via options page
- 目标用户
- Privacy-conscious web users / Users frequently visiting Cloudflare-protected websites / Users who want to avoid repeated CAPTCHA challenges while preserving anonymity
- Extension source is bundled/minified (background.js is 238KB single file), making deep logic analysis harder but key patterns are clear
- Cannot fully verify if destination Cloudflare attester service requires login since it's external—however the extension itself does not
付费分析未识别到付费功能
No payment, subscription, premium, upgrade, billing, or price references found in the source code. Grep for 'premium', 'payment', 'subscription', 'upgrade', 'billing', 'price' all returned 0 matches in background.js. The 'pro' keyword hits from the static scan are all false positives: Object.prototype methods (lines 2-21), Object.getOwnPropertyNames (line 19), and SERVICE_WORKER_MODE.PRODUCTION (line 633). The extension is fully functional without any gated features or payment flows.
- 置信度
- 95
- 支付平台
- --
- 来源
- AI / 高
- 需要登录
- 否
- 登录理由
- The extension implements the Privacy Pass anonymous authorization protocol. No user account, login UI, or credential entry exists anywhere in the codebase. Grep for 'login' and 'account' in background.js returned 0 matches. The 'auth' keyword hits are all cryptographic authentication (AES-CCM tags, WWW-Authenticate header parsing at lines 6340-6396), not user account authentication. The 'token' hits refer to anonymous Privacy Pass cryptographic tokens, not login/session tokens. The options page (options/index.html) only contains attester URL configuration and service worker mode selection—no login fields.
Worked fine in the past, but now when i click get more passes, then it redirects to a boring page, but grants no more passes! It's become totally useless!
It saved me a LOT of time. Thanks!
Работает через раз.
It was actually Cloudflare's job to provide what make it think you need a proof of work to access something, or at least make it simple on the user's end. Require to install an extension as workaround is already at the edge of unacceptable, if the extension randomly refresh the page you are at while exhausting your proof of work at the same time, it is totally unacceptable. If it not improve soon I will address this to every website I encounter the issue, that Cloudflare is inconveniencing their customer to a point of annoying.
very bad
When i click "Get more passes" it brings me homepage of extension instead of captcha. Please fix.
Works just fine and others have explained how to get it started. To those who say it's useless, it's a hell of a thing to be used by almost 98,000 users and yet.... be useless. I just tried and although it's not highly intuitive... It. Simply. Works. And fantraxhq.com is proof of that... Like another user wrote: You'll have to yet another street-sign or CARS test, but then you get 30 credits. Try it : ) WORKS IN CHROME.
tengo los dns de cloudflare segun para una navegacion segura, los captcha me dan un mensaje, ERROR para el propietario del sitio web: el dominio de la clave de sitio web no es válido me hace la sugerencia del complemento de privacy pass pero no pasa nada????
no entiendo como funciona, y busco y no encuentro nada que me lo explique bien. ¿Para que sirven los pases? dicen que que reducen el numero de capchas que hay que pasar pero sigo haciendo capchas sin parar y sigo acumulando pases sin saber para que me sirven. Se supone que tiene que dar acceso a la pagina web que quiero entrar pero no funciona. No entiendo nada de esta extencion.
no sirve para nada