Cloudflare launches closed beta for OHTTP gateway to enhance user privacy

The service operates through a "double-blind" privacy model involving two independent hops: a relay and a gateway. An OHTTP relay forwards encrypted requests while stripping client identifiers, and the OHTTP gateway performs the cryptographic work of decapsulating those requests so that app servers can process them as standard HTTP. This separation of trust ensures that no single party can see both the user's identity and the request content.

The new gateway is particularly useful for customers who already protect their web servers behind Cloudflare's infrastructure. Previously, using Cloudflare's OHTTP Relay alongside Cloudflare-protected servers would break the privacy model because Cloudflare would be able to see both the client metadata and the decrypted request contents. With the OHTTP Gateway, developers can maintain the necessary separation of trust while leveraging Cloudflare's global edge network to minimize latency.