Google is taking a significant step to ensure privacy for its users with the introduction of a new “IP Protection” feature designed for the Chrome browser. This unique feature, which is fortified by proxy servers, aims at masking the IP addresses of users to enhance privacy.
Why do we need this? IP addresses can be misused for covert tracking. It allows websites and online services to monitor activities across different platforms which enable the creation of persistent user profiles. This invariably breaches the privacy of users as IP tracking bypasses most available measures to avoid tracking, unlike third-party cookies.
However, the new IP Protection solution by Google addresses this concern head-on. The new feature will funnel third-party traffic from specific domains via proxy servers, hiding users’ IP addresses from these domains. This would enhance privacy while maintaining the necessary functionalities of the web.
Google will gradually evolve and refine the IP Protection feature to keep up with changes in the ecosystem. The feature will adapt to continuously shield users from cross-site tracking. As the program progresses, more domains will be added to the list of those with proxied traffic.
But how does one join this program? At the inception, the IP Protection feature will be optional, giving users the ability to control their privacy while Google observes behaviour trends. Google’s plan is to introduce the feature in phases, considering regional performance and facilitating a learning curve.
The first phase, known as “Phase 0,” centres on Google proxying requests to its domains through a unique proxy. This preliminarily testing phase will allow Google to evaluate the infrastructure of the system while fine-tuning the domain list. To access these proxies, users need to be logged into Google Chrome and have US-based IPs.
In the future phases, Google is considering adopting a 2-hop proxy system for enhanced protection. This system entails running a secondary proxy by an additional CDN, while Google runs the first hop. This way, neither proxy can view both the client IP address and the destination, increasing privacy protection.
However, Google is aware of potential cybersecurity threats associated with the new IP Protection feature. Traffic proxied through Google’s servers may pose a challenge for existing security and fraud prevention services to block DDoS attacks or detect invalid traffic. In a scenario where a Google’s proxy server is compromised, the attacker can have access to view and manipulate the traffic flowing through it.
To mitigate against this, Google is putting several measures in place. These include requiring users to authenticate with the proxy, preventing proxies from connecting web requests to specific accounts, and introducing rate-limiting to thwart DDoS attacks.
Overall, while there may be potential security concerns, the “IP Protection” feature is a significant step forward in the constant battle for user privacy. As the digital world continues to evolve, necessary measures like these help ensure that privacy isn’t left by the wayside.
Related Articles:
https://www.bleepingcomputer.com/news/google/google-chromes-new-ip-protection-will-hide-users-ip-addresses/
https://isp.page/news/google-chromes-new-ip-protection-will-hide-users-ip-addresses/