● Covered by 1 source · 1 reportMedium impact1 neutral
Cloudflare launches OHTTP Gateway for privacy-preserving HTTP requests
Key points
- Cloudflare launched OHTTP Gateway.
- It enables receiving HTTP requests without user IP addresses.
- Gateway is a paid add-on for Cloudflare zones.
- Complements existing OHTTP Relay product.
Cloudflare Introduces OHTTP Gateway
Cloudflare has launched the Cloudflare OHTTP Gateway, a new service designed to help developers integrate privacy into their applications. This gateway allows app backends to receive HTTP requests while obscuring user IP addresses, addressing concerns about online privacy and data trails left by client-server exchanges.
Functionality and Privacy Benefits
Oblivious HTTP (OHTTP) is an IETF standard that separates trust between a relay and a gateway. The OHTTP Gateway performs the cryptographic work of decapsulating encrypted requests and encapsulating responses, enabling app servers to process OHTTP requests as if they were standard HTTP. This separation ensures no single party can view both client identifiers and request contents, enhancing user privacy.
Expanding the OHTTP Product Suite
The OHTTP Gateway is a paid add-on for Cloudflare zones, available through a closed beta. This new offering complements Cloudflare's existing OHTTP Relay product, formerly known as Privacy Gateway, which was launched in 2022. The relay forwards encrypted requests to hide client identifiers from app servers, while the gateway handles the decryption for the app server. The company has renamed "Privacy Gateway" to "Cloudflare OHTTP Relay" to differentiate the two services.
Addressing Developer Needs
Cloudflare's experience operating OHTTP relays highlighted the challenges developers face in building and scaling secure OHTTP gateways. The new self-serve OHTTP Gateway aims to simplify this process, providing customers with a complete OHTTP architecture that ensures the necessary separation of trust for privacy-preserving applications. This allows customers to use Cloudflare for both the relay and gateway components of an OHTTP setup.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
GitHub cloudflare/privacy-gateway-client-library GitHub thibmeu/ohttp-relay CVE CVE-2023-503877.5 HIGHReporting from
Cloudflare announced the Cloudflare OHTTP Gateway, a new paid add-on that allows customers to receive HTTP requests without exposing user IP addresses. This expands Cloudflare's existing OHTTP product suite, which previously included only an OHTTP relay, providing a complete solution for developers to integrate privacy into their applications.