{"repo":"wbsmolen/columbia","free":true,"listed":false,"github":"https://github.com/wbsmolen/columbia","clone":"git clone https://github.com/wbsmolen/columbia.git","description":"Self-hosted, operator-blind HTTP proxy toolkit (OHTTP relay + attested gateway + commons cache). Non-commercial.","language":"JavaScript","stars":16,"topics":[],"license":null,"category":"self-hosted-apps","readme_excerpt":"Columbia A self-hostable HTTP proxy toolkit for personal use, built so that no operator can link who made a request to what was fetched. Privacy derives from what each party is structurally unable to observe, not from a policy commitment. Columbia is named after Apollo 11's Command and Service Module, which stayed in orbit without visibility into the lunar surface operations below. The toolkit has almost no dependencies. HTTP content is fetched through a split-trust path built on OHTTP (RFC 9458). Three services carry the request path (relay, gateway, commons cache), and a fourth optional service (the token issuer) gates who may use the relay without identifying them. Each runs as a self-hosted service on Docker, on any host. No single operator ever holds both client identity and request content at the same time. The relay sees the client IP but only opaque ciphertext. The gateway decrypts and fetches but never sees the client IP. Run the two as separate operators and neither can link a client to the content it fetched. This is a toolkit, not a hosted service; it requires self-provided servers and keys. It is released for personal, non-commercial use (see LICENSE). --- How it works The OHTTP path. No single hop holds both client identity and request content. 1. The client seals each request locally with HPKE. Only the gateway's public key can open it, and the sealed bytes mean nothing to anyone in between. 2. The relay receives the sealed request. All it ever holds is the cli","default_branch":null,"files":null,"tree":[],"storefront":"/r/wbsmolen","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/wbsmolen/columbia/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}