I couldn't find a suitable go implementation for Oblivious HTTP Client & Gateway (RFC 9458). So, I'm open sourcing ours.
Some background:
OHTTP is a protocol that hides who you are from the data you send - if you've ever used products of Apple, Mozilla, Fastly, or Cloudflare (to name a few) you probably used OHTTP.
Key Features:
- implemented as http.RoundTripper
- supports chunked transfer encoding
- customizable HPKE (e.g., for custom hardware-based encryption)
Some background: OHTTP is a protocol that hides who you are from the data you send - if you've ever used products of Apple, Mozilla, Fastly, or Cloudflare (to name a few) you probably used OHTTP.
Key Features:
- implemented as http.RoundTripper
- supports chunked transfer encoding
- customizable HPKE (e.g., for custom hardware-based encryption)
- built on top of twoway and bhttp libraries
Repo: https://github.com/confidentsecurity/ohttp
Detail: https://blog.confident.security/ohttp/
Explainer: https://support.mozilla.org/en-US/kb/ohttp-explained
Specs: https://datatracker.ietf.org/doc/rfc9458/ , https://datatracker.ietf.org/doc/draft-ietf-ohai-chunked-oht...
Feedback welcome!