Apple’s iCloud Private Relay protects Safari traffic, but it is not a full device-wide VPN and can fail to hide real IP and DNS data during passkey authentication and other WebKit-related network actions. Security researchers found that WebAuthn, DNS prefetching, and WebTransport can expose user network identifiers, affecting both Safari and third-party browsers on iOS. #iCloudPrivateRelay #WebAuthn #WebKit #Safari #WebTransport
Keypoints
- iCloud Private Relay only protects Safari traffic, not all device network activity.
- Passkey authentication can reveal a user’s real IP address and DNS information.
- WebAuthn requests are handled by system services outside Safari’s proxy protections.
- DNS prefetching and WebTransport can also leak real network identifiers.
- Apple is investigating the issue, and a system-wide VPN is the best temporary mitigation.
Read More: https://securityonline.info/icloud-private-relay-ip-leak/