The flaws affect Apple’s iCloud Private Relay, a paid iCloud+ feature designed to hide users’ IP addresses and DNS information while browsing in Safari. The researchers said they verified the issue through a proof-of-concept website that can show whether a user’s real IP address is exposed while Private Relay is enabled. A site designed to exploit the behavior could potentially collect the real IP address of a Private Relay user. Privacy feature faces fresh scrutinyThe discovery highlights a key difference between Private Relay and a full VPN. Apple designed Private Relay to protect Safari browsing traffic, not every connection made by an iPhone or Mac.