3 ms·

I believe Apple now supports ODoH (oblivious DNS over HTTPS) although I do not know if it is used for private relay.

• No1 5y ago
  They are using ODoH in the private relay. https://www.apple.com/privacy/docs/iCloud_Private_Relay_Overview_Dec2021.PDF https://www.apple.com/privacy/docs/iCloud_Private_Relay_Over...
  • tylerchr 5y ago
    To quote the relevant section: “ODoH sends DNS queries through the first internet relay, so the DNS server cannot identify the user issuing a query. Each query itself is padded and encrypted using Hybrid Public Key Encryption (HPKE) to help ensure that the first internet relay cannot tell the domain name a user is looking up.” Apple is the “first internet relay” and they seem to explicitly state that they don’t see the DNS queries themselves.