Apple's forthcoming iOS 16 and macOS Ventura will support the new Privacy Pass industry standard for authenticating users as legitimate people and not bots. This new technology can replace annoying CAPTCHAs, allowing web sites and app services to fight fraud in a way that's automatic and invisible for users. Privacy Pass authenticates users as real without identifying them or allowing any kind of tracking. It does this with a multi-step exchange of "blinded" cryptographic keys involving an authentication server that the web site trusts, plus a separate authentication server that the phone (and Apple) trusts. The process verifies that the user is using a trusted, signed app (such as Safari), that they are signed in to a valid Apple ID account, and that they have successfully unlocked their phone using biometric authentication. The browser can then generate signed tokens on demand as part of a new "PrivateToken" HTTP handshake process when connecting to a web server. When using the Safari browser or certain APIs for apps, this happens automatically before a web page loads. If successful, the web page will load without the CAPTCHA that it would normally have. Users do not need to do anything to use the feature. Web site owners that currently use CAPTCHAs will need to update their servers to support Privacy Pass, although CAPTCHA providers may be able to enable the feature through their existing CAPTCHA APIs.
from Phone Scoop - Latest News https://ift.tt/m02nu9p
No comments:
Post a Comment