‹ BackHN Continuity

Thread

Cloudflare OHTTP gateway

203 points · 95 comments · est

  1. ranger_danger · · focus · HN ↗
    Does any current proxy/tunnel/VPN software support OHTTP as a transport method?

    What about browsers making general website requests to services that support it?

    1. jon-wood · · focus · HN ↗
      iCloud Private Relay (available on every macOS and iOS device in recent years) uses OHTTP to obscure your identity from sites you visit.
      1. ranger_danger · · focus · HN ↗
        Yes, but that shifts the trust even moreso onto Apple, and now they know every site you visit AND can see all your unencrypted traffic from their servers, and can associate that traffic across multiple devices/accounts/IPs with it.

        Collusion between the relay and gateway is exactly the situation they warn breaks the privacy features of OHTTP.

        And while some might think "well Apple controls the whole OS, they can always spy on you"... yes, but I'm operating under the assumption that they're not currently doing this, and that collecting data at the relay level may be easier/more desirable/discrete for them.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.