diff --git a/blog/posts/privacy-pass.md b/blog/posts/privacy-pass.md
index d62d0f48..c67e8be4 100644
--- a/blog/posts/privacy-pass.md
+++ b/blog/posts/privacy-pass.md
@@ -148,7 +148,7 @@ The client presents tokens to the Origin once they're provided by the issuer.

-Illustration: Cloudflare
+Illustration: [Cloudflare](https://blog.cloudflare.com/eliminating-captchas-on-iphones-and-macs-using-new-standard/)
### Private State Tokens