Privacy Gateway: a privacy preserving proxy built on Internet standards
Oct 27, 2022Mari Galicer, Christopher Wood
Summary
Introduced Privacy Gateway, a privacy-preserving proxy built on Internet standards (Oblivious HTTP - OHTTP) and hybrid public-key cryptography. Privacy Gateway encrypts HTTP requests and responses between a client and an application server, ensuring that neither Cloudflare nor the application server has the full picture of the communication, thereby enhancing end-user privacy. It enables use cases like private telemetry collection, secure healthcare reporting, and privacy-preserving DNS resolution. The post details the architecture (Client, Privacy Gateway, Application Server), data flow, and the concepts of request privacy and client privacy, along with server integration requirements.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack