Keeping the Web Open and Private in the Bot Era

Mozilla is launching an initiative with Cloudflare and other browser vendors to address the growing tension between web privacy and bot abuse. As browsers eliminate tracking signals like IP addresses and fingerprints, anti-abuse systems lose their tools, leading to more CAPTCHAs and login walls. The post critiques existing solutions like Web Environment Integrity (WEI) and Apple's Private Access Tokens for relying on device attestation and centralizing control. Mozilla proposes a decentralized, privacy-preserving vouching system based on anonymous credentials, where any trusted party can vouch for users without revealing their identity or enabling cross-site tracking — aiming to reduce friction while keeping the web open and private.