Nicheloom

Market intelligence for builders — see what's gaining traction before it's crowded.

Oblivious HTTP for Go

Details

External ID
45749011
Source
HN
Company
—
Product
Oblivious HTTP for Go
Website domain
github.com
Launched
Oct. 29, 2025
Cohort
—
Upvotes
10
Upvotes percentile
0.5943396226415094
Tags
—
Fetched at
Sept. 7, 2026, 9:25 p.m.
Updated at
Sept. 7, 2026, 9:25 p.m.

Description

I couldn't find a suitable go implementation for Oblivious HTTP Client & Gateway (RFC 9458). So, I'm open sourcing ours.Some background: OHTTP is a protocol that hides who you are from the data you send - if you've ever used products of Apple, Mozilla, Fastly, or Cloudflare (to name a few) you probably used OHTTP.Key Features:- implemented as http.RoundTripper- supports chunked transfer encoding- customizable HPKE (e.g., for custom hardware-based encryption)- built on top of twoway and bhttp librariesRepo: https://github.com/confidentsecurity/ohttpDetail: https://blog.confident.security/ohttp/Explainer: https://support.mozilla.org/en-US/kb/ohttp-explainedSpecs: https://datatracker.ietf.org/doc/rfc9458/ , https://datatracker.ietf.org/doc/draft-ietf-ohai-chunked-oht...Feedback welcome!

Enrichment

Theme
file transfer and sharing tools
Vertical
Security
Function
Dev tools
Audience
Developer
AI stance
Not AI
Project type
Hobby / open-source project
Normalized one-liner
privacy-preserving http implementation for go
Manually corrected
False

Could you build this?

Partial While RFC specs can be translated with LLM help, implementing an RFC-compliant cryptographic transport protocol safely requires rigorous knowledge of secure protocol design.

What it would actually take: The architecture requires implementing RFC 9458 and HPKE (RFC 9180) in Go, building both client libraries and HTTP gateway reverse proxies. The critical and difficult parts are strict binary wire-format parsing, cryptographic key encapsulation/decapsulation without side-channel leaks, and interop testing against existing relay infrastructures (Cloudflare/Fastly). It demands practical expertise in applied network cryptography, secure memory handling, and Go HTTP transport primitives.

Discussion

No comments on this launch.

Competitors

Other products that read as similar to this one — 87 launches clear the similarity bar, closest 8 shown.

Attention rank: #37 of 88 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).

Looks like the first mover among its competitors.

Other launches for this product

Same idea, different domain

Nobody's really built a dev tools tool for Sales yet.