3 ms·
Two interesting side effects, if I understand correctly: 1. Dramatically reduces the number of entities the government needs to "partner" with (via NSLs and/or
by SheinhardtWigCo 4y ago
Two interesting side effects, if I understand correctly:
1. Dramatically reduces the number of entities the government needs to "partner" with (via NSLs and/or TAO) for the firehose of domains visited by Apple users.
2. Apple gets a time series of Safari network traffic for each user
I wonder how many popular domains could be unmasked by an ISP that is supposedly blind to the destination of each packet but can of course still see fine-grained traffic patterns for each user.
- olliej 4y ago(1) Private Relay encrypts the request, so the host that can identify the client cannot read the request. The host that can decrypt the request cannot identify the client. So without making a total change to how it works it's not it by design cannot be used for surveillance. (2) Again, by design Apple cannot see what is being requested, so no it doesn't get a time series of safari traffic. If that were a real concern that you had, then recall the Apple could just have Safari report those directly, without having to have any VPN-type insanity. The text that is important is, it would seem very hard for Apple to say this is if was not true: "This information could be used to determine your identity and build a profile of your location and browsing history over time. iCloud Private Relay is designed to protect your privacy by ensuring that when you browse the web in Safari, no single party—not even Apple—can see both who you are and what sites you're visiting."