OHTTP: an Open-Source Oblivious HTTP (OHTTP, RFC 9458) library in Go (original) (raw)

October 29, 2025, 3:57pm 1

Hey Golang community,
We’re thrilled to announce another open-source library: OHTTP, a Go library implementing Oblivious HTTP (RFC 9458) with client and gateway components.

Why does this exist?
We needed a Go-native library that allows HTTP requests to be processed in a privacy-preserving way, separating client identity from request content, while integrating naturally with Go’s net/http types.

Key Features

• Implemented as http.RoundTripper
• Supports chunked transfer encoding
• Customizable HPKE (e.g., for custom hardware-based encryption)
• Built on top of twoway and bhttp libraries

Get Started
Repository: https://github.com/confidentsecurity/ohttp
Apache-2.0 license
Check out the README for quick start guides, API references, and examples.
We’d love feedback and contributions!

Cheers,
Confident Security