Live data from Hacker News

"Advanced Tracking and Fingerprinting Protection" Leaks DNS Queries to Apple

community.cloudflare.com

1–10 of 13 posts

Re: "Advanced Tracking and Fingerprinting Protection" Leaks DNS Queries to Apple

#2
I noticed I couldn't reach my home servers which use split dns resolution, and it turns out that's because iOS 17 routes DNS queries via Apple DNS servers when using 'Advanced Tracking and Fingerprinting Protection'.

Good to know

* when setting up home networks or

* you want to use DNS for content filtering or

* you prefer your DNS queries to stay private

Re: "Advanced Tracking and Fingerprinting Protection" Leaks DNS Queries to Apple

#5

I noticed I couldn't reach my home servers which use split dns resolution, and it turns out that's because iOS 17 routes DNS queries via Apple DNS servers when using 'Advanced Tracking and Fingerprinting Protection'. Good to know * when setting up home networks or * you want to use DNS for content filtering or * you prefer your DNS queries to stay private

I just have Avahi and mDNS active on my machines, and access everything through .local names.

Re: "Advanced Tracking and Fingerprinting Protection" Leaks DNS Queries to Apple

#7

I would be interest for Kagi (with their browser Orion) to comment and get their take on this

While Orion also has anti-tracking technology, they do not have this specific feature where a custom DNS server is used to block tracking.

Re: "Advanced Tracking and Fingerprinting Protection" Leaks DNS Queries to Apple

#8
post #7

I would be interest for Kagi (with their browser Orion) to comment and get their take on this

While Orion also has anti-tracking technology, they do not have this specific feature where a custom DNS server is used to block tracking.

They say they literally use Advance Tracking Protection, even at the most basic level of Ads and Tracking Protection (which is a mandatory minimum setting)...

It Advance Tracking Protection™ an Apple thing or is it a broader more extensible standard?

Re: "Advanced Tracking and Fingerprinting Protection" Leaks DNS Queries to Apple

#9
post #7

Earlier quoted context omitted.

While Orion also has anti-tracking technology, they do not have this specific feature where a custom DNS server is used to block tracking.

They say they literally use Advance Tracking Protection, even at the most basic level of Ads and Tracking Protection (which is a mandatory minimum setting)... It Advance Tracking Protection™ an Apple thing or is it a broader more extensible standard?

Orion uses https://webkit.org/tracking-prevention/ and they have their own custom ad and tracking blocker.

They do not set a custom DNS server like the linked issue says.

Re: "Advanced Tracking and Fingerprinting Protection" Leaks DNS Queries to Apple

#10
post #9

Earlier quoted context omitted.

They say they literally use Advance Tracking Protection, even at the most basic level of Ads and Tracking Protection (which is a mandatory minimum setting)... It Advance Tracking Protection™ an Apple thing or is it a broader more extensible standard?

Orion uses https://webkit.org/tracking-prevention/ and they have their own custom ad and tracking blocker. They do not set a custom DNS server like the linked issue says.

Gotcha. Excellent work, thank you
Post reply on HN