Safari private browsing on iOS 17 uses Apple DNS server

[lapcat]

https://defcon.social/@mysk/110509521752322207

[lapcat]

I had to edit the title for length. Here's the full Mastodon post:

> When using private browsing on iOS 17, Safari overwrites your DNS settings and routes DNS queries to Apple even if you don't use iCloud Private Relay. DNS queries will be routed to this server

> [screenshot of DNS query to canary.mask.apple-dns.net]

[lapcat → lapcat]

FWIW I cannot reproduce this on Mac. I just took a packet trace of Safari 17 private browsing on the Sonoma beta, and I did not see an Apple DNS. It used my system setting, as expected.

[gigatexal → lapcat]

Interesting and not good. Does this do this even when using a vpn?

[gigatexal → gigatexal]

seems VPNs are allowed to use their own DNS:

"mysk Mysk @mysk @gracjan NextDNS works as a VPN. A VPN connection overwrites all settings."