Abstract: A client device receives a challenge request from a server to prove that internet traffic was initiated by a human user through verifying a physical interaction between a human user and a hardware component. The client device causes a prompt to be displayed to perform the physical interaction with the hardware component. A cryptographic attestation is received that includes an attestation signature that is generated after confirmation that the physical interaction was performed with the hardware component. A zero-knowledge proof of the attestation signature is generated and transmitted to the server for verification. The client device receives the requested content responsive to the server verifying the validity of the zero-knowledge proof.

Abstract: An authoritative domain name system (DNS) server receives a DNS query for an address record for a hostname. The DNS server selects an IP address from multiple IP addresses to include in an answer to the DNS query, where each IP address is capable of being selected to be included in the answer regardless of the hostname being queried, where multiple servers of a distributed cloud computing network are capable of receiving traffic at each IP address, and where none of the IP addresses identify a particular server of the distributed cloud computing network. The authoritative DNS server transmits an answer to the DNS query that includes the selected IP address. Sometime after, one of the servers of the distributed cloud computing network receives a request for content that is addressed to the selected IP address and processes the request.

Abstract: An authoritative domain name system (DNS) server receives a DNS query for an address record for a hostname. The DNS server selects an IP address from multiple IP addresses to include in an answer to the DNS query, where each IP address is capable of being selected to be included in the answer regardless of the hostname being queried, where multiple servers of a distributed cloud computing network are capable of receiving traffic at each IP address, and where none of the IP addresses identify a particular server of the distributed cloud computing network. The authoritative DNS server transmits an answer to the DNS query that includes the selected IP address. Sometime after, one of the servers of the distributed cloud computing network receives a request for content that is addressed to the selected IP address and processes the request.