Safari leaks let any site see your real IP despite Apple Private Relay
Mysk researchers uncovered three unpatched Safari leaks—DNS prefetching, WebAuthn related‑origin requests, and WebTransport—that bypass Apple’s Private Relay and reveal a user’s real IP to any website, affecting all iOS WebKit browsers, including Tor‑based ones. VPNs remain unaffected, and Apple has not been notified.