Service eligibility and regional restrictions
PuppyIP serves only compliant overseas businesses and their authorized personnel. Proxy services are not available in mainland China. The service may only be used for lawful business activities outside mainland China. Use of this service within mainland China is prohibited.
Hosting a proxy IP or server overseas does not change these restrictions. The service must not be provided to end users in mainland China through relaying, forwarding, sharing or resale. Before use, read the Terms of Service.
Key Takeaways
- The Cloudflare authors distinguish the quantum forgery risk to current Privacy Pass tokens from issuance/redemption unlinkability.
- MOLE aims to hide which trusted anchor issued an endorsement, after which a moderator issues a credential for its own interaction policy.
- VOLE-IHAT and VOLE-ACT are developing candidates, with estimates, parameters and security proofs still requiring work.
- The article supplies no MOLE launch date, countries, client versions, plans or prices. Token privacy does not establish that network metadata is hidden.
Separate forgery resistance from unlinkability
On November 6, 2026, Cloudflare published The post-quantum future of web privacy, by Christopher Patton, Tianyu Zhang and Bas Westerbaan. It discusses using privacy tokens for abuse prevention and traffic management while reducing reliance on challenges, accounts or fingerprinting.
Privacy Pass clients obtain tokens and later redeem them for site access. The authors explain that its current RSA and elliptic-curve cryptography would allow a sufficiently capable quantum attacker to forge tokens. Separately, they describe unlinkability between genuine token issuance and redemption as an unconditional privacy property.
These properties protect different things: whether the site can trust that a token was not forged, and whether an observer can match redemption to its earlier issuance. The threat description does not establish that such a quantum attack is occurring today.
What MOLE aims to add
MOLE stands for Moderation Of unLinkable Endorsements. In the authors’ design, a client proves to a moderator that its endorsement came from one of an agreed set of trusted anchors, without revealing which one. On acceptance, the moderator issues a credential used to manage interaction with its site.
Think of the goal as proving membership in an approved set while hiding the particular member. A hypothetical site might need evidence that a trusted source endorsed a client without needing to identify that source. This is an explanatory example, not configuration instructions for a launched product.
Issuer hiding is intended to support more client types and management of agent traffic. It does not remove the site’s own access or rate-limiting policies or automatically grant a client eligibility.
What remains under development
The authors are developing VOLE-IHAT and VOLE-ACT as candidates for MOLE endorsements and credentials, respectively. They use the VOLE-in-the-Head and multivariate-cryptography approaches discussed in the article. Current cost figures are explicitly estimates that may change.
Outstanding work includes protocol security proofs, further analysis of UOV security and stable parameters. The authors also identify an experimental multivariate-commitment optimization whose security is unclear and whose risks could include client privacy.
Existing Privacy Pass privacy properties therefore cannot establish that every new candidate is secure. Performance descriptions from the authors’ implementation are not measurements of your environment. The article supplies no formal MOLE launch date, supported countries or client versions, plans, fees or operator setup steps.
Where token privacy ends
Issuance/redemption unlinkability describes a relationship within the token protocol. It does not establish that a site cannot see IP addresses, network metadata, cookies or account records. Visibility of those signals requires a separate assessment of the actual system and data path.
The article names existing Privacy Pass applications, including iCloud Private Relay and Privacy Gateway, to describe deployment experience. Those examples do not establish that these services already use MOLE, VOLE-IHAT or VOLE-ACT, or that all clients have received new protection.
How to assess the announcement now
If you maintain a site or client, first identify your question: token forgery, disclosure of the issuer, or other network signals. Record existing deployments separately from research candidates, then follow formal protocols, security analysis, stable parameters and concrete product integration announcements.
For Workers runtime algorithm support, see the published post-quantum WebCrypto guide. Runtime primitives and compatibility are a separate concern; enabling a runtime flag does not establish a MOLE deployment.
This article interprets the scope of Cloudflare’s research. It did not run a cryptographic implementation, test tokens, connect a proxy or modify a site. Decisions about current services still require their actual protocol, version and formal change records.
Sources
Frequently Asked Questions
Why not substitute an ordinary post-quantum signature?
The authors distinguish ordinary signatures from goals such as blind signatures and issuer-hiding endorsements. Parameters optimized for one use may not suit another. Replacing an algorithm name does not establish migration of the complete protocol.
Does using a proxy change a site’s token quota or access eligibility?
This article provides no evidence of that. Proxy connectivity, token acceptance, account eligibility and site rate limits are separate questions. Changing a network exit must not be treated as granting additional quota or an exemption from site rules.