Apple's “iCloud Private Relay” broke risk based authentication

Re:Apple's “iCloud Private Relay” broke risk based authentic... by knodi on Wednesday July 07, 2021 @03:13PM (#27764749)

There is no Apple's IP address with Private Relay. Apple is using 3rd part companies as its exit nodes to avoid this "whitelist apple ip addresses" concern.

[ Parent | on HN ]

Re:Apple's “iCloud Private Relay” broke risk based authentic... by Boerworz on Wednesday July 07, 2021 @04:41PM (#27765530)

The "Get ready for iCloud Private Relay" session[1] from this year's WWDC makes it seem like there will be a publicly available list of IP addresses used by Private Relay:

Private Relay guarantees that users can't use the system to pretend to be from a different region, so you can continue to enforce region-based access restrictions. Details about the proxy IP addresses will be available as an article associated with this session.

Though I haven't been able to find the aforementioned article.

[1]: https://developer.apple.com/videos/play/wwdc2021/10096/

[ Parent | on HN ]

Re:Apple's “iCloud Private Relay” broke risk based authentic... by banana_giraffe on Wednesday July 07, 2021 @06:45PM (#27766620)

Here's the article:

https://developer.apple.com/support/prepare-your-network-for...

And their IPs, as mentioned in that article:

https://mask-api.icloud.com/egress-ip-ranges.csv

Seems to be mostly Fastly IP addresses right now, but I'm sure that'll change over time.

[ Parent | on HN ]

Re:Apple's “iCloud Private Relay” broke risk based authentic... by alam2000 on Tuesday July 20, 2021 @12:33AM (#27890102)

I'm running the list using IP2Location and it is showing 3 CDNs now.

(a) Fastly (b) CloudFlare (c) Akamai

[ Parent | on HN ]