3 ms·

This is interesting. I think overall I approve as it benefits people by default. It does mean you now have to trust Apple since that's the first hop. However y

This is interesting. I think overall I approve as it benefits people by default. It does mean you now have to trust Apple since that's the first hop. However you're already doing this when you spin up your AWS Lightsail Wireguard instance, say. AWS can see ingress and egress traffic and so you just need AWS to not be part of your threat model. Same here. Though I dont see this as too much of a problem since it applies to devices and services where you've already made this explicit choice. The app limitation thing is a shame and hopefully there will be an API at a later date. The exit node choice based on exit-locality kinda makes me think Apple either: - Want to restrict this service being (ab)used for geolocked content (Netflix etc) - Want to speed up the service by providing the closest exit node (Performance) Of course given all the FBI cases, you also have to consider other possibilties for the creation of this service.

joshstrange 5y ago
Craig Federighi, on the most recent episode of The Talk Show with John Gruber [0] about 47 minutes into the episode, talked about this and I think both your assumptions are correct. For the first one I'm sure they didn't want to deal with the complexity of picking an exit location nor did they want to be a party to getting around geo-locking and so this gave them the best of both worlds, no UI and no issue with geo-blocking. For the second point I think that is also the reason as well as it's often helpful if a website knows your general location (For relevant recommendations, CDN routing, etc) but we'd prefer if the website didn't know exactly where we are coming from (IP-wise) which can be used for tracking/ads. [0] https://daringfireball.net/thetalkshow/2021/06/11/ep-316 https://daringfireball.net/thetalkshow/2021/06/11/ep-316
nuker 5y ago
> your AWS Lightsail Wireguard instance This will still be your fixed IP, not adding much to your privacy.

joshstrange 5y ago

Craig Federighi, on the most recent episode of The Talk Show with John Gruber [0] about 47 minutes into the episode, talked about this and I think both your assumptions are correct. For the first one I'm sure they didn't want to deal with the complexity of picking an exit location nor did they want to be a party to getting around geo-locking and so this gave them the best of both worlds, no UI and no issue with geo-blocking. For the second point I think that is also the reason as well as it's often helpful if a website knows your general location (For relevant recommendations, CDN routing, etc) but we'd prefer if the website didn't know exactly where we are coming from (IP-wise) which can be used for tracking/ads. [0] https://daringfireball.net/thetalkshow/2021/06/11/ep-316 https://daringfireball.net/thetalkshow/2021/06/11/ep-316

nuker 5y ago

> your AWS Lightsail Wireguard instance This will still be your fixed IP, not adding much to your privacy.