Cloudflare, Mozilla, Google, and Microsoft are developing PACT, a privacy-preserving protocol to verify legitimate web traffic without tracking users.