Thibault
thibmeu.com
Thibault
@thibmeu.com
Drinking tea. Eating croissant. Distributed systems, Cryptography at Cloudflare
From where I'm standing, it looks close enough
June 5, 2025 at 10:23 AM
Compatibility with existing web

The good thing: it works today. We provide examples with a Chrome extension, a Caddy plugin, and a Cloudflare Workers.
With a few lines of JS, your bot/website is ready to go.
All is on GitHub github.com/cloudflarere...
May 15, 2025 at 3:24 PM
How does it work

One proposed solution relies on HTTP Message Signatures (RFC 9421). Bots sign the host of the request they are making, add a validity window, and send the signature with the request.
See the demo http-message-signatures-example.research.cloudflare.com.
May 15, 2025 at 3:24 PM
There is the "technical should be hidden" team, and there is @porkbun.com suggesting you go implement TOTP RFC 6238. Love it
April 26, 2025 at 2:01 PM
Not sure if the above gif renders with bluesky. The same as a video, still generated by VHS. Part of why it's awesome.
March 21, 2025 at 8:04 AM
Sneak peak at the demo, validating WhatsApp Key Transparency using Plexi
github.com/cloudflare/p...
March 21, 2025 at 8:00 AM
From what I see in my day to day experience, I'd say mostly big players. Datadome publishes this quadrant. At the same time, captcha providers don't place captcha on website. Website owner do. This vaan be for anyone using a VPN to anyone making a payment. How they are used would be interesting.
January 16, 2025 at 8:24 PM
That works well indeed. Thanks!
December 22, 2024 at 1:44 PM