4 ms·
More details here. https://www.fastcompany.com/90643627/apple-privacy-wwdc-private-relay-vpn-icloud-plus-macos-monterey https://www.fastcompany.com/90643627/ap
by nojito 5y ago
More details here.
https://www.fastcompany.com/90643627/apple-privacy-wwdc-private-relay-vpn-icloud-plus-macos-monterey https://www.fastcompany.com/90643627/apple-privacy-wwdc-priv...
>This is where iCloud Private Relay comes in—and puts VPNs to shame. iCloud Private Relay uses a dual-hop architecture. When you navigate to a website through Safari, iCloud Private Relay takes your IP address, which it needs to connect you to the website you want to go to, and the URL of that site. But it encrypts the URL so not even Apple can see what website you are visiting. Your IP and encrypted destination URL then travels to an intermediary relay station run by a third-party trusted partner. Apple would not name these trusted partners, but says the company is working with some of the largest content providers out there. Before getting to this relay station, however, your IP address is anonymized and randomized, so the relay partner can’t identify you or your device. Then at the relay station, the destination URL is unencrypted, so the third-party provider can send you on to the website you want to go to.
>Because of this dual-hop architecture, neither Apple nor the relay station knows both who you are and where you are going. Apple knows who you are (because you are using iCloud Private Relay), but it doesn’t know where you’re browsing. Its third-party partner knows where you are browsing–but not who you are.
- wolverine876 5y agoThank you! Now I'm trying to remember why Tor uses three hops instead of two. Perhaps it's intended to prevent the exit node from knowing the first hop, preventing attackers from associating traffic on the two nodes. I wonder what Apple does to prevent that. If Apple chooses to invest resources in it, I expect Apple's Private Relay servers are much more secure than Tor servers. I hope Apple allows non-Apple users to utilize Private Relay.