Cloudflare’s OHTTP Gateway Refuses to Decrypt Requests That Arrive Through Cloudflare
UsefulInfoQ · 2026-10-13 06:44 UTC Cloud
AI Summary
Cloudflare has launched a closed beta of its OHTTP Gateway, a managed endpoint that decrypts Oblivious HTTP requests for an origin. The gateway will not decrypt requests that come through Cloudflare Workers or proxied hosts to keep client identifiers and request contents separate. This design choice aims to protect privacy by preventing a single point from seeing both client identity and request data.
AI analysis by Groq
Why should I care?
Because it affects how Cloud-based services handle encrypted traffic, which is relevant to your interest in Cloud.
Eligible for automatic cleanup in 3 day(s) unless marked Must Read.
Content
Cloudflare has opened a closed beta of its OHTTP Gateway, a managed endpoint that decrypts Oblivious HTTP requests for an origin. The design choice drawing attention is a refusal: the Gateway will not decrypt requests arriving from Cloudflare Workers or from hosts proxied through Cloudflare, because that would put client identifiers and request contents in the same hands. By Steef-Jan Wiggers