Privacy Pass DEMO
 

1Origin returns WWW-Authenticate header
2Attester presents challenge
3Issuer issues token
4New request to Origin made with token



Interactive challenge


An Attester vouches for some attribute(s) of the user. In this instance it is the ability to solve a Turnstile challenge.

Successful solution of the above challenge results in the Attester requesting a Private Access Token from the Issuer.

The Privacy Pass extension, on receipt of the Private Access Token, initiates a reload of the original page from the Origin. The token is sent along with that reload request.