The <a href="https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API" rel="noopener noreferrer nofollow">Fetch API</a> is the standard, easy-to-use JavaScript interface for builders to pull information from the web. But like almost all interactions online, using this API leaks metadata, meaning traffic to and from the API is traceable, and therefore vulnerable to pattern analysis. To solve this, developers can now run the Fetch API through the Nym mixnet with mixFetch, giving cover to network traffic when retrieving resources from websites or online services.WTF is mixFetch?Think of <a href="https://sdk.nymtech.net/guides/mix-fetch" rel="noopener noreferrer nofollow">mixFetch</a> as a drop-in replacement to the Fetch API, but with one difference: traffic patterns that would ordinarily be exposed are now protected by the mixnet.Languages: <a href="https://medium.com/&#64;nymfrance/mixfetch-comme-lapi-fetch-mais-via-le-mixnet-5c14c2d68887" rel="noopener noreferrer nofollow">Française</a>With mixFetch, developers can create privacy-enhanced apps that retrieve resources from the web, leaving no trace whatsoever. For example, mixFetch could be used to create a simple JavaScript chat application with guaranteed anonymity via the mixnet.What does it mean to ‘fetch’ via the mixnet?Here’s what happens when any kind of message, transaction or request is sent via the Nym mixnet: first, it is wrapped into identically looking encrypted ‘packets’ and shuffles these in with dummy packets. These are then sent through three ‘hops’ to mix nodes all over the world, effectively making it impossible to trace patterns of communication.These packets are then decrypted and reassembled at the receiving end, protecting IP addresses, metadata and thereby any patterns of communication that can be used to deanonymise people or learn about services.When a packet emerges on the other side, it is routed via a Nym ‘Network Requester’ that engages with services on the user’s behalf, a little like a proxy.<a href="https://blog.nymtech.net/tech-deepdive-network-requesters-e5359a6cc31c" rel="noopener noreferrer nofollow">Read more: Tech deep-dive: Nym Network Requesters</a>With mixFetch, developers can plug and play this infrastructure into web apps, ensuring there is no direct link between the mixnet user and the web service they are using.How to privacy-enhance web apps with mixFetchWriting code with mixFetch is simple.Start by installing mixFetch:npm install &#64;nymproject/mix-fetchNext, paste the following into your code, swapping out the examples for the API you need.import { mixFetch } from &#39;&#64;nymproject/mix-fetch&#39;;…// HTTP GETconst response &#61; await mixFetch(&#39;https://nymtech.net&#39;);const html &#61; await response.text();…// HTTP POSTconst apiResponse &#61; await mixFetch(&#39;https://api.example.com&#39;, {method: &#39;POST&#39;,body: JSON.stringify({ foo: &#39;bar&#39; }),headers: { [&#96;Content-Type&#96;]: &#39;application/json&#39;, Authorization: &#96;Bearer ${AUTH_TOKEN}&#96; }});That’s it! Now you’ve privacy-enhanced Fetch with mixFetch.Wow, that’s pretty easy. What’s the catch?There are currently some limitations. At present, only a handful of <a href="https://nymtech.net/.wellknown/network-requester/standard-allowed-list.txt" rel="noopener noreferrer nofollow">web services are enabled for Nym mixnet Network Requesters</a>. Until these have been opened up, mixFetch will only work with services on this list. Hop into the dev chat on <a href="https://discord.com/channels/824256813200834580/907388467380633670" rel="noopener noreferrer nofollow">Discord</a> or <a href="https://matrix.to/#/#dev:nymtech.chat" rel="noopener noreferrer nofollow">Matrix</a> to request a service to be added to the list!One possible solution to expand the use of mixFetch is for Network Requesters to run via open proxy, which would enable contacting more services without their permission. The user could then theoretically pull any information from any website or service.However, this poses another set of challenges, because open proxies can be abused by malicious actors.A potential solution to this problem is to run a model similar to <a href="https://tornull.org/" rel="noopener noreferrer nofollow">Tor Null</a> for Tor Exit Node operators. This is essentially a deny list that bans traffic to and from known problematic addresses. Alternatively, a whitelist could be introduced, only allowing traffic to and from guaranteed safe web addresses.Nym core is currently engaging with operators to find the best possible solution to enable mixnet usage for the widest possible range of services.In the meantime: there are two options for developers who wish to access a service that’s not currently on the allow list.<ul><li>Run your own Network Requester and configure it to allow the hosts you need to connect to</li><li>Get in touch with Nym core via <a href="https://github.com/nymtech/nym/issues/new?title&#61;Feedback&#43;for&#43;%E2%80%9CmixFetch%E2%80%9D&amp;labels&#61;feedback" rel="noopener noreferrer nofollow">Github</a>, <a href="https://matrix.to/#/#dev:nymtech.chat" rel="noopener noreferrer nofollow">Matrix</a> (Element) or <a href="https://discord.gg/nym" rel="noopener noreferrer nofollow">Discord</a> about the sites you would like to see included in the standard allow list</li></ul><a href="https://sdk.nymtech.net/guides/mix-fetch" rel="noopener noreferrer nofollow">MixFetch is available right now</a> — try it!Developers: try to use mixFetch to build a privacy-enhanced web app that runs over the mixnet, and please do send feedback via the Nym community channels below.Join the Nym Community<a href="https://discord.com/invite/nym" rel="noopener noreferrer nofollow">Discord</a> //<a href="https://t.me/nymtech" rel="noopener noreferrer nofollow"> Telegram</a> //<a href="https://matrix.to/#/%23dev:nymtech.chat" rel="noopener noreferrer nofollow"> Element</a> //<a href="https://twitter.com/nymproject" rel="noopener noreferrer nofollow"> Twitter</a>Privacy loves company<a href="https://t.me/nymchan" rel="noopener noreferrer nofollow">English</a> //<a href="https://t.me/nymchina" rel="noopener noreferrer nofollow"> 中文</a> //<a href="https://t.me/NYM_Russian" rel="noopener noreferrer nofollow"> Русский</a> //<a href="https://t.me/NYM_turkey" rel="noopener noreferrer nofollow"> Türkçe</a> //<a href="https://t.me/nymtechvn" rel="noopener noreferrer nofollow"> Tiếng Việt</a> //<a href="https://t.me/nymjapanese" rel="noopener noreferrer nofollow"> 日本</a> //<a href="https://t.me/nymfrench" rel="noopener noreferrer nofollow"> Française</a> //<a href="https://t.me/NYMSPANISH" rel="noopener noreferrer nofollow"> Español</a> //<a href="https://t.me/nymportuguese" rel="noopener noreferrer nofollow"> Português</a> //<a href="https://t.me/nymkorea" rel="noopener noreferrer nofollow"> 한국인</a>

MixFetch — like the Fetch API, but via the mixnet

NymProject

Other articles published on Oct 4, 2023

MEXC Ventures makes eight-figure investment in Toncoin and launches strategic partnership with TO...

Alchemy Pay Amplifies the Revival of Real-World Assets (RWA) to Propel Tangible Applications in C...

Ripple Fully Licensed to Provide Digital Payment Token Services

SubQuery Releases Version 3 to Enhance Web3 Data Indexing for Developers

Former Celsius CEO Alex Mashinsky's Criminal Trial Set for September 2024

El Salvador’s Volcano Energy Launches First Local Bitcoin Mining Pool

Join our free newsletter for daily crypto updates!