#2.3 / 699 rate

Silk - Privacy Pass Client

400,000 users

2020-04-24

Cloudflare Research

ask-research@cloudflar...

Extension Information

5 star

15%

4 star

3 star

2 star

1 star

68%

Supported Languages

Permissions

Hot Permissions

Description

Client support for Privacy Pass anonymous authorization protocol.

This extension provides unlinkable cryptographic tokens for websites that support the Privacy Pass protocol. For example, these tokens can be used on Cloudflare-protected websites to improve your human signal.

How it works?

Privacy Pass Providers: Cloudflare Research

Get tokens
1. If a website requests a Privacy Pass token, the extension is automatically going to request you to perform the associated challenge.
2. One page will open with a challenge to be solved.
3. Solve successfully the challenge and the extension will get **one** token.

See FAQs and Known Issues section: if something is not working as expected.

Reviews

G B

não funcionou no site da egyptair.com

Gwyneth Llewelyn

I'm not 100% sure about how exactly this is supposed to work. Note that I'm a fan of everything Cloudflare, and that's why I still have this extension turned on. However, I have increasingly been suspected of "not being human" — possibly because I'm using the Brave browser? It's Chromium underneath, obviously (or the extension wouldn't work!), but perhaps Brave blocks some additional things, managing to confuse Cloudflare. The point of "saving" a token so that you just need to get validated as being human once (or once per day...) makes a lot of sense, but it's not obvious how it works *now*. In the past, it *did* work in 100% of the cases, as others have reported. Currently... it's most a question of luck, I guess. Note that it's not easy to understand _what_ triggers the actual requirement for "human validation"; I have it appearing on my own websites, installed on my very own servers, which are also behind Cloudflare, but I would *assume* that, by now, Cloudflare would have "learned" that I'm supposed to be a legitimate user of my own websites — or so I would think. Granted, nothing can be worse than using Tor to browse the regular Web — you get validated twice, first (usually) by Cloudflare, and then by Google, which is _much_ worse and takes a lot of time, clicking on all those pictures until Google's happy... it's an annoyance in exchange for being able to browse the Web without being tracked.