IP blocks should be neither authentication nor authorization
IP blocks should be neither authentication nor authorization
Posted Jul 11, 2026 14:15 UTC (Sat) by fraetor (subscriber, #161147)In reply to: IP blocks should be neither authentication nor authorization by quotemstr
Parent article: An update on the scraper situation
Mozilla has been exploring this recently with anonymous credentials to allow different services to assert identity via zero-knowledge proofs.
It essentially acts as a web-wide rate limit, under the theory that bot traffic is problematic not because it is automated, but rather because a single bot operator can produce way more traffic than an individual person would.
High level post on the goals:
https://blog.mozilla.org/en/firefox/privacy-security/keep...
And the Hacks post that goes into the technical details:
https://hacks.mozilla.org/2026/06/pact-anonymous-credenti...