The new Private Access Control Token (PACT) technology, developed in collaboration with Mozilla, Google, Microsoft, and Shopify, is pioneering a privacy architecture designed to protect online interactions internationally.
Cloudflare, Inc., the leading cloud connectivity company, announced a new initiative with leading web browsers Mozilla Firefox, Google Chrome, and Microsoft Edge to develop and submit for standardization a privacy-protecting protocol that helps both people and bots prove their traffic is not malicious. As the internet shifts from human clicks to agent activity, website operators must now find ways to stop aggressive automated traffic without resorting to invasive tracking. This initiative will lay the foundation for a smoother, safer, and more private experience for both internet users and website owners.
“The way we interact with the internet is undergoing a fundamental shift. Everyday tasks, like ordering food, used to require users to personally navigate menus and payment gateways. Now, autonomous agents are starting to manage these workflows on behalf of people,” said Dane Knecht, Chief Technology Officer at Cloudflare. “As AI-powered traffic becomes more widespread, existing tools to support its use are proving too generic and rudimentary. This collaboration now allows us to eliminate the hurdles posed by security protocols for all visitors human or agent without sacrificing privacy.”
For decades, website operators have relied on a patchwork of imperfect defenses to combat automated abuse, but these techniques are becoming less effective against today’s threats. Now, with the explosion of generative AI, the battlefield has shifted once again. Malicious automation is more widespread, more sophisticated, and causes greater financial harm to website owners. As we move toward an era of autonomous AI, the line between human behavior and bot activity is blurring, posing an unprecedented privacy challenge to the digital world. When websites attempt to verify whether a request originates from a real human or an authorized bot, traditional solutions, such as mandatory logins and intrusive tracking, erode user trust.
“In the retail world, any additional difficulty, delay, or false positive can turn a purchase into an abandoned cart. Merchants need effective protections against automated abuse, but shoppers shouldn’t have to pay for them with unnecessary friction or invasive tracking. Shopify is proud to contribute to the development of PACT as an open, privacy-protecting standard that can help the millions of businesses on our platform distinguish legitimate shoppers and authorized agents from abusive traffic, while preserving shopper privacy.” – Ilya Grigorik, Senior Engineer at Shopify.
Also Read: Pump.co Expands Free Cloud Savings Platform Into AI Cost Optimization as Companies Face Rising Infrastructure Bills
Private Access Control Tokens (PACTs) are designed to allow websites with a deep understanding of user “personality” to issue anonymous tokens. A user’s browser can then provide these tokens to other websites to prove that a human is behind them, reducing the need for cumbersome and unintuitive CAPTCHAs or invasive tracking. PACTs are designed so that websites cannot use them to track or identify users or their browsing history.
“The health of the web depends on effective, interoperable, and privacy-respecting tools that allow websites to combat abuse without causing unnecessary inconvenience to users. At Microsoft, we are delighted to collaborate on the development of new standards and help ensure their implementation across the open web.” – Erik Anderson, Director of Engineering for the Microsoft Edge Web Platform.
“Mozilla is committed to defending openness and user privacy on the web. A surge of automated traffic is forcing websites to adopt drastic defensive measures paywalls, identity verification, CAPTCHAs, and invasive tracking simply to determine if a request is from a human. We can create a better solution that maintains a high level of privacy while providing a far less intrusive experience for real users browsing the web. This project requires collaboration across the entire ecosystem, and we are excited to work with Cloudflare and other partners who share our vision to make it a reality.” -Bobby Holley, Technical Director of Firefox at Mozilla.
PACT will enable businesses to better identify authentic visitors, ensuring they can focus their resources on the traffic that truly matters to them. PACT leverages trusted information from contexts that maintain genuine relationships with people, while preserving the privacy of that information. This provides businesses with high-integrity assurances about their audiences with minimal hassle. Using PACT on the Cloudflare network raises the bar for security and integrity on the internet without the usual costs.
Source: Businesswire