The Privacy Pass HTTP Authentication Scheme

I was wondering what the new "Automatic Verification" to "Bypass CAPTCHAs" setting in iOS 16 is. It turns out that Apple, Google and Cloudflare came up with a new HTTP authentication scheme to attest "humanness" of a device.

* Announcement by Apple: "Challenge: Private Access Tokens" (June 9, 2022) https://developer.apple.com/news/?id=huqjyh7k

* WWDC 2022 video: https://developer.apple.com/videos/play/wwdc2022/10077/