Show HN: Oblivious HTTP for Go

9 points by jmort 6 hours ago

I couldn't find a suitable go implementation for Oblivious HTTP Client & Gateway (RFC 9458). So, I'm open sourcing ours.

Some background: OHTTP is a protocol that hides who you are from the data you send - if you've ever used products of Apple, Mozilla, Fastly, or Cloudflare (to name a few) you probably used OHTTP.

Key Features:

- implemented as http.RoundTripper

- supports chunked transfer encoding

- customizable HPKE (e.g., for custom hardware-based encryption)

- built on top of twoway and bhttp libraries

Repo: https://github.com/confidentsecurity/ohttp

Detail: https://blog.confident.security/ohttp/

Explainer: https://support.mozilla.org/en-US/kb/ohttp-explained

Specs: https://datatracker.ietf.org/doc/rfc9458/ , https://datatracker.ietf.org/doc/draft-ietf-ohai-chunked-oht...

Feedback welcome!