You must log in or register to comment.
I find it difficult to wrap my head around how Privacy Pass actually works. It seems pretty involved. Kagi‘s implementor actually explained it over on hackernews, but that‘s only a summary.
Since it‘s an RFC standard, I don’t doubt that it works, but I hope someone smarter than me actually checks Kagi‘s open-sourced client code, which should be enough to ensure anonymity, according to the standard.
I’m with you. I couldn’t begin to audit something like that, and this article is lengthy (though some of the handshake graphics are kinda funny). The amount of detail in this, what I assume is a summary, left me a bit lost.
