76
Kagi Blog - Education Shouldn't Be Held for Ransom
(blog.kagi.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 05 Nov 2026
76 points (93.2% liked)
Privacy
51892 readers
770 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 7 years ago
MODERATORS
No, what they said is technically accurate.
The whole point of their architecture is that they don’t have to look up your account — but that does nothing to guarantee that they don’t decide to look up your account.
Since you have to auth in order to generate the anonymized tokens, Kagi could (in principle) track which account generated the tokens and query that relationship when you go to use a token.
Ultimately, if you’re not fabricating your own silicon and hand-writing your own assemblers and compilers, you gotta trust someone, so it’s good enough for my risk profile, but I can understand if that’s not good enough for some people.
That is factually incorrect.
Help page from Kagi (I'd understand if you don't trust it), fit for non-techie consumption. https://help.kagi.com/kagi/privacy/how-does-privacy-pass-work.html
So here's the RFC, which defined the protocol in the first place (Kagi didn't invent it, just implements it) https://www.rfc-editor.org/info/rfc9576/
As such they have absolutely no way of 'deciding' to look up a searchers account based on the token used.
That ofcourse does not reduce other ways anyone can track you like fingerprinting.