Technology
Cloudflare releases open-source debugger for split-trust privacy protocols, targets AI agents
A new command-line tool lets developers troubleshoot encrypted privacy infrastructure like Apple's iCloud Private Relay without needing deep protocol expertise.
The New Stack
Privacy systems like Apple's iCloud Private Relay rely on a fundamental trade-off: they divide trust across multiple operators so that no single company can see both a user's identity and their online destination. Protocols such as Oblivious HTTP (OHTTP) and MASQUE achieve this by routing requests through independently operated infrastructure. Yet this architectural elegance creates a debugging nightmare—when something breaks, the encrypted, encoded traffic passes through multiple systems, each controlled by a different operator, and no single party can see the full path of the request.
Cloudflare has now released pvcli ("privacy-client"), an open-source command-line debugger for OHTTP and eventually MASQUE, made available under an MIT license on GitHub. The tool addresses a critical gap: testing and fixing split-trust infrastructure has historically required the scale and expertise of companies like Apple and Microsoft, leaving smaller organizations without practical recourse.
How split-trust privacy works#
In Apple's relay setup, the company operates one side of the connection while Cloudflare's Privacy Proxy product handles the other. This split ensures that Apple's infrastructure sees the user's origin but not their destination, while Cloudflare sees the destination but not the user's original IP. Together, neither party—nor any outside observer—can link a specific person to a specific website they visit.
The very security that makes this approach valuable, however, becomes its debugging liability. The transparency needed to diagnose a fault directly contradicts the system's core function: deliberately withholding complete visibility.
Why tooling matters for adoption#
Building custom debugging infrastructure demands specialized knowledge and engineering resources. Fisher Darling, a systems engineer at Cloudflare, highlighted a real-world example: when health app Flo Health integrated with Cloudflare's OHTTP relay, troubleshooting unforeseen operational edge cases consumed substantial time despite both teams' efforts.
"Debugging privacy protocols where different operators need to operate different pieces of the protocol infrastructure is extremely difficult," Darling said. The current approach involves manual work, custom scripts, and uncertainty.
