@techreport{pfeiffenberger-prtokens-00, number = {draft-pfeiffenberger-prtokens-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-pfeiffenberger-prtokens/00/}, author = {Philipp Pfeiffenberger and Jonathan Katz and Theodore Olsauskas-Warren}, title = {{Probabilistic Reveal Tokens}}, pagetotal = 16, year = 2025, month = jul, day = 21, abstract = {Fraud detection often relies on high-entropy signals that can also be used to track users across sites. Probabilistic Reveal Tokens (PRTs) attempt to balance the needs of fraud detection and tracking prevention by sampling at a rate that is too low for scaled cross- site tracking, but sufficient for fraud detection in aggregate scenarios. This document describes the PRT protocol, which allows browsers to reveal sensitive signals (e.g., IP address) on a per-site basis with provable probability p\_reveal, while websites can use PRTs to measure traffic quality and update denylists.}, }