Talk:Oblivious HTTP

This article is rated B-class on Wikipedia's content assessment scale.
It is of interest to the following WikiProjects:

Internet Low‑importance

	Internet portal This article is within the scope of WikiProject Internet, a collaborative effort to improve the coverage of the Internet on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.InternetWikipedia:WikiProject InternetTemplate:WikiProject InternetInternet
Low	This article has been rated as Low-importance on the project's importance scale.

Computing: Networking / Security Low‑importance

This article is within the scope of WikiProject Computing, a collaborative effort to improve the coverage of computers, computing, and information technology on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.ComputingWikipedia:WikiProject ComputingTemplate:WikiProject ComputingComputing

Low This article has been rated as Low-importance on the project's importance scale.

This article is supported by Networking task force (assessed as Low-importance).

This article is supported by WikiProject Computer security (assessed as Mid-importance).

Things you can help WikiProject Computer security with:

How you can help:

Add to your watchlist the project talk page! Post there for help with articles or to suggest articles that need work.
Request editing suggestions on your talk page by entering WikiProject_Computer_security into this template.
Check the article alerts to participate in deletion discussions, review Good Article nominees, and review draft articles.
Edit any articles that interest you. Recommended:
- Most popular articles that need the most work (last refreshed 28 June 2026)
- Popular articles (monthly top articles by views)
- High-importance stub-quality articles
- High-importance start-quality articles
- Mid-importance stub-quality articles
- Mid-importance start-quality articles
- Unknown-importance stub-quality articles
- Unknown-importance start-quality articles
Review changes to popular articles or changes to talk pages.
Replace deprecated archival service links.
Recategorize articles in Category:Security to more specific categories
Fix something on the list of articles that need cleanup, including:
- Clarification needed
- Rewrite needed
- Expansion needed
- Style editing needed
- Update needed
- Orphaned (add links from other articles to these articles)
- Conflict of interest
- Original research
- Promotional tone
- Biographies of living persons (BLP) articles lacking sources
- Cites no sources
- Cites unreliable sources

Of the 3619 articles in this project 1992 or 55% are marked for cleanup, with 4041 issues in total.

Editing resources:

Cryptography: Computer science Low‑importance

	This article is within the scope of WikiProject Cryptography, a collaborative effort to improve the coverage of Cryptography on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.CryptographyWikipedia:WikiProject CryptographyTemplate:WikiProject CryptographyCryptography
Low	This article has been rated as Low-importance on the importance scale.
	This article is supported by WikiProject Computer science (assessed as Low-importance).

Criticism section?

Latest comment: 10 months ago3 comments2 people in discussion

A previous version of the page included a section describing how relay bootstrapping requires you to connect to the requested server, breaking its guarantees unless fetched over Tor, proxy, or VPN or cached from a trusted network.

It was removed for original research, but it seems to correctly cite the spec even while editorializing. I think it be put into a Criticisms section with better citations. 31.144.52.144 (talk) 09:08, 19 September 2025 (UTC)Reply

Happy to add critique of the protocol if you can help find relevant citations! Academic papers are ideal, but since this topic is a bit niche, I think it's ok to cite things like self-published technical blog posts if they come from reputable sources, such as company blogs or people who are regarded as experts in this field. Dreamyshade (talk) 19:12, 20 September 2025 (UTC)Reply

Added back info about RFC 9540 to the article, including that "the initial DNS request could expose the client's IP address to the server if not otherwise hidden", but with context to make clear that this is part of an uncommon use case for Oblivious HTTP. Dreamyshade (talk) 04:08, 21 September 2025 (UTC)Reply