Website Security & Threat Management
Stronger than a promise: proving Oblivious HTTP privacy properties

Stronger than a promise: proving Oblivious HTTP privacy properties

10/27/2022 · Christopher Wood, Jonathan Hoyland

What this post added

This post introduces Oblivious HTTP (OHTTP) and its implementation as Privacy Gateway, a new privacy-enhancing protocol. It details how OHTTP decouples sender identity from request content through an encrypted relay mechanism, enhancing user privacy for applications. The post also describes the formal, computer-aided security analysis conducted to prove the privacy properties of OHTTP, using tools like Tamarin for modeling and verification.

Read the original post ↗