What you need to know
Apple will ship iCloud+ Private Relay alongside iOS 15 this fall.
A new report considers the privacy feature to be the “beginning of the end” for iOS device fingerprinting.
But it isn’t perfect
Apple’s iOS 15 release, due to arrive this fall, will see the arrival of iCloud+ and its new Private Relay feature. It’ll obfuscate a user’s IP address to help prevent them from being tracked across the internet and, according to one report, it could spell the end for iOS device fingerprinting.
According to DigiDay, some ad execs believe that Apple isn’t enforcing its App Tracking Transparency (ATT) rules as harshly as it could — but that Private Relay could be the ace in the hole.
Private Relay will re-route an iPhone, iPad, and Mac’s data through an Apple server and then out via another one that’s owned by a trusted third party. Nobody knows who that third party is, and it’s the use of separate ingress and egress servers that ensures a user’s privacy — web services will have no idea what their actual IP address is. And neither will the trusted third party, either. It’s here where it’s thought Apple’s anti-fingerprinting goal will really kick in.
Private Relay renders a person’s IP address useless for fingerprinting because it redirects web traffic through two separate servers. Granted, an IP address is just one of many aspects that make a fingerprint of someone’s behavior on a device — but it’s an important one.
What’s more, DigiDay believes that Private Relay is just the start, with more Apple-led privacy moves to come that could yet further hinder device — and user — identification across the internet. But it isn’t perfect.
There are other loopholes in Private Relay that could be exploited. For instance, Private Relay restricts traffic apps send over an insecure web connection (HTTP). So apps that use an IP address for fingerprinting could theoretically work around this by using a secure web connection or some other transport protocol. This may lead to a “cat and mouse game” between Apple, ad tech vendors with fingerprinting solutions, and the apps integrating them, said Aaron McKee, chief technology officer at mobile ad tech vendor Blis.
It’s that cat and mouse game that Apple has signed itself up for and, so far at least, it seems to be up for the fight. Who will win, nobody knows — but I know where my money’s going. Privacy is one of the best iPhone features around and that’s why Apple promotes it so heavily. It has the bit between its teeth and won’t be letting go of it any time soon.