implement Privacy Pass / Private State Tokens in Firefox

[Nika]

Integrate native support for the IETF Privacy Pass standard (RFC 9578) / Private State Tokens API directly into Gecko and Firefox core.

Instead of requiring users to solve a CAPTCHA on every single site protected by anti-bot services, native Privacy Pass support would allow Firefox to:

1. Store cryptographically "blinded" trust tokens whenever a user successfully proves they are human (e.g., via one CAPTCHA or account verification).

2. Redeem these tokens automatically in the background when visiting subsequent sites that use the same challenge provider.

3. Bypass future CAPTCHA prompts instantly without revealing the user’s identity, browsing history, or IP address.

If you’re tired of solving endless traffic light and crosswalk puzzles just because you value your privacy or run a VPN, please upvote and kudos this proposal!

Let’s give Firefox the modern, privacy-preserving infrastructure it needs to make the web fast and frustration-free again.

[Jon]

Thanks for submitting an idea to the Mozilla Connect community! Your idea is now open to votes (aka kudos) and comments.