Email or username:

Password:

Forgot your password?
Johannes Ernst

This is really weird: #Safari on #iPad. Anybody any ideas?

I run an air quality sensor on my LAN at a hostname served from the local DNS (which runs on my gateway).

If I access this host from Safari in regular mode, it comes up just as expected.

If I access this host in a "private tab", I now get this (screenshot). The content is what you get if you access the gateway (not my sensor!) without a valid virtual hostname. Why would it access the gateway? And what "privacy protections"?

3 comments
Dave Peck

@J12t Hrm. Is it running through iCloud Private Relay?

Johannes Ernst

@davepeck now here is an idea! Indeed the air quality monitor is not directly accessible from the public internet. I guess I need to unpack some network debug tools, and seriously rethink just how “private” a #safari #private tab is if it moves local traffic that only traverses my house LAN to the public internet, and I don’t care how encrypted it is.

Thomas Guyot-Sionnest

@J12t @davepeck my best guess is that it would forward anything through the gateway's known MAC to avoid someone on the LAN from snooping on you through ARP-based attacks.

One way to test could be to add a static ARP entry for your device's IP pointing at your router's MAC and see if it replicates the before you're seeing...

EDIT: I missed "iPad". Packet dump from your router if that's possible...

Go Up