Encrypting your WAF Payloads with Hybrid Public Key Encryption (HPKE)

What this post added

Introduced encrypted WAF matched payload logging using Hybrid Public Key Encryption (HPKE). This feature allows customers to provide their own public key (or generate a key pair) to encrypt sensitive parts of requests that trigger WAF rules. The encrypted payloads are logged as base64 blobs in the metadata field and can be decrypted client-side via the dashboard or using a command-line utility with the customer's private key. This enhances user privacy by ensuring only the customer can decrypt the matched payload data.