There's no hard facts about what the hell they're actually planning, it's just a fluff press release.

They claim that PACTs will be some sort of token that sites and services that can confirm you are a human or "trusted AI agent" can grant you to allow other sites to better identify you as good, but that these tokens will also somehow be entirely anonymous and unable to be used to track an identity across multiple sites and services. At absolute best this will create a sort of "chain of trust" hierarchy where people who use more popular services tied to their real identity would gather more PACTs or have "higher trust" ones, just consolidating digital power further.

Also, the first quote from Cloudflare's CTO has them claiming that people are starting to use AI agents to order them meal deliveries. Lmao, in what universe?

I will believe privacy-first when I see the implementation. If, for instance, Google is one of these trusted issuers and I already have an account with them I guess I've opted into that. If it requires signing up for some new devil, then that's different.

I also suspect these will be spoofed in about 5 minutes, but we'll see.

Private Access Control Tokens (PACT) are designed to allow sites with strong knowledge of “personhood” to issue anonymous tokens.

A centralization of authorization. So that's why Google and Microsoft are interested.

If it's open enough, could still be a net-positive.

Depends on the mechanism though. Too weak and it can be automated and misused, losing "it's a human". Too strong and there's more concerns about privacy, control, and centralization of the selected auth providers and browsers making the selection.

Maybe hosters could use their own trust lists, like Firefox does for certs. But most will just go with the big and common default set.

I'd prefer skipping the anti-ai guards. But having to give a passwort to Google for it? I don't know. They'd have enough data on me to know I'm a human without it.

This is a press release. Is there more technical or concise information?

Uh, right... Cloudflare??