Stronger than a promise: proving Oblivious HTTP privacy properties

https://blog.cloudflare.com/stronger-than-a-promise-proving-oblivious-http-privacy-properties/