Using HPKE to Encrypt Request Payloads

What this post added

This post introduces the integration of Hybrid Public Key Encryption (HPKE) into Cloudflare's Firewall Rules feature. This allows Enterprise users to securely debug Firewall Rules by viewing encrypted request payloads that matched a rule. The implementation leverages HPKE for client-side encryption and decryption, ensuring that sensitive data is only accessible to the user and not Cloudflare itself. This enhances the debugging capabilities of the WAF, providing greater transparency and control to users.