Encrypting your WAF Payloads with Hybrid Public Key Encryption (HPKE)
Dec 11, 2020Michael Tremante
Summary
Introduced encrypted WAF matched payload logging, enabling customers to encrypt sensitive data within WAF events using Hybrid Public Key Encryption (HPKE) and their own private keys. This feature enhances security event visibility while preserving end-user privacy by ensuring only the customer can decrypt the matched payloads. The post details the implementation using HPKE, the generation of key pairs via a CLI utility, and the decryption process through the dashboard or CLI.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack