RHC — A protocol that introduces dynamic entropy to protect the integrity of modern communication flows.
RHC mitigates the Flow Channel Hijacking Attack (FCHA), a threat class where adversaries observe and replicate legitimate communication patterns to execute unauthorized actions undetected — without breaking encryption or stealing credentials.
RHC does not replace CSRF tokens, SameSite cookies, OAuth, or TLS.
It operates at a distinct layer: Communication Integrity Layer (CIL) — validating whether the flow behaves legitimately, not just whether credentials are valid.
Compatible with: fetch / XMLHttpRequest (AJAX), mobile applications, microservices, distributed architectures, CI/CD pipelines, and AI agent systems.
While this page serves as the project's official OWASP identity card, the GitHub repository is the primary source of truth.
All protocol documentation, PoC implementations (4 levels), architecture, threat model, and technical resources are managed and hosted there.
Slack