IETF 107: PRIVACYPASS

The objective of the Privacy Pass effort is to standardize a performant mechanism for providing privacy-preserving attestation of a previous successful authorization between a human and a server. The idea is to support use cases where it may be necessary to check that a client has been previously authorized by a service without learning any other information. Such lightweight authorization mechanisms can be useful in quickly assessing the reputation of a client in latency-sensitive communication.