Hey Golang community,
We’re thrilled to announce another open-source library: OHTTP, a Go library implementing Oblivious HTTP (RFC 9458) with client and gateway components.
Why does this exist?
We needed a Go-native library that allows HTTP requests to be processed in a privacy-preserving way, separating client identity from request content, while integrating naturally with Go’s net/http types.
Key Features
- Implemented as http.RoundTripper
- Supports chunked transfer encoding
- Customizable HPKE (e.g., for custom hardware-based encryption)
- Built on top of twoway and bhttp libraries
Get Started
Repository: https://github.com/confidentsecurity/ohttp
Apache-2.0 license
Check out the README for quick start guides, API references, and examples.
We’d love feedback and contributions!
Cheers,
Confident Security