Its announcement says developers can use the --allowed-mail option in a cloudflared command to restrict access to listed email addresses or domains, with no Cloudflare account required on either side. The change adds an identity gate to a tool for exposing a local app, while the announcement excerpt does not specify implementation details or broader security guarantees.
Raw SignalOct 2, 20261 min read1 source
Protected Quick Tunnels: simple accountless authentication for your next dev project
In one minute
Cloudflare has added email-based access control to Quick Tunnels.