
iCloud Private Relay Leaked Real IP Addresses for Two Years: Any Passkey-Enabled Site Could Obtain Them
Three WebKit features bypassed proxy settings to expose the real IP addresses that iCloud Private Relay is supposed to hide. The leak via WebAuthn went unaddressed for roughly two years, meaning any passkey-enabled site could obtain users' real IPs.








