● Covered by 2 sources · 2 reportsMedium impact2 neutral
Cloudflare open-sources 'pvcli' debugger for OHTTP and MASQUE privacy protocols
Key points
- Cloudflare released 'pvcli' debugger.
- Supports OHTTP and MASQUE protocols.
- Licensed under Apache 2.0.
- Aids debugging multi-party privacy services.
- Used in Apple's iCloud Private Relay and Microsoft's Edge Secure Network.
Introduction of pvcli
Cloudflare has open-sourced a new command-line interface (CLI) tool named "privacy-client" (pvcli). This tool is designed to simplify the debugging process for privacy-preserving protocols such as Oblivious HTTP (OHTTP) and MASQUE. It has been released under the Apache 2.0 License and is open for contributions.
Addressing Debugging Challenges
Privacy services like Apple’s iCloud Private Relay and Microsoft’s Edge Secure Network VPN utilize protocols that split trust across independently operated infrastructure. This design prevents any single entity from linking a user's identity to their online activity. However, this multi-party system makes troubleshooting difficult when issues arise, as requests can touch several separate systems, each run by a different operator, with encrypted and encoded traffic.
The complexity of these multi-party protocols, binary encodings, and details spread across various draft RFCs previously caused friction for privacy product teams during development and incident response. Cloudflare, which operates Privacy Proxy and Privacy Gateway for services like Apple's internet privacy service, developed pvcli based on its experience operating OHTTP at scale.
Functionality and Use Cases
The pvcli tool provides a way to execute a full Oblivious HTTP request, including a relay, gateway, and origin, with a single line of code. This functionality allows developers and operators to inspect and trace faults in systems where traffic is encrypted and encoded, making manual inspection slow and error-prone.
The tool is intended to assist in debugging privacy services where multiple parties are involved, ensuring that no single company can see both who a user is and what they are doing online, while still allowing for effective problem diagnosis.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
GitHub cloudflareresearch/pvcli GitHub martinthomson/ohttp GitHub chris-wood/ohttp-go CVE CVE-2023-503877.5 HIGHHow outlets covered it
Cloudflare released "privacy-client" (pvcli), a command-line debugger for Oblivious HTTP (OHTTP) and MASQUE protocols, under an Apache 2.0 license. This tool addresses the difficulty of troubleshooting privacy services like Apple's iCloud Private Relay and Microsoft's Edge Secure Network VPN, which split trust across multiple operators to prevent any single entity from linking user identity to online activity.
A new command-line interface (CLI) tool, pvcli, has been open-sourced under the Apache-2.0 License to simplify the debugging of privacy-preserving protocols like Oblivious HTTP (OHTTP). This tool addresses the complexity of multi-party protocols and binary encodings, which previously caused friction in development and incident response for privacy product teams.