Skip to main content

2022/06/20

Interesting Websites

Private Access Tokens: eliminating CAPTCHAs on iPhones and Macs with open standards

  • A completely invisible, private way to validate that real users are visiting your site.
  • This will eliminate nearly 100% of CAPTCHAs served to these users.
  • Usability aside, mobile environments present an additional challenge in that they are increasingly API-driven. CAPTCHAs simply cannot work in an API environment where JavaScript can’t be rendered, or a WebView can’t be called.

Note that this is not Apple Passkey. This is the Privacy Pass standard. Apple Passkey is a FIDO alliance.