iCloud Private Relay leaks real IP addresses

Security researchers Talal Haj Bakry and Tommy Mysk found three WebKit features that bypass Apple's iCloud Private Relay, exposing real IP addresses or DNS server information. DNS prefetching, WebAuthn passkey verification, and WebTransport can all route requests outside the proxy on iOS and macOS.