Thu. Nov 14th, 2019

Apple Safari will automatically share the URL and IP address on Safe Browsing mode to Tencent

2 min read

Apple’s Safari browser turns on fraudulent URL warnings by default, which is designed to help users check for security recommendations when visiting certain websites. For example, when a website visited by a user belongs to a phishing website and there is malicious content, the fraudulent URL warning will immediately pop up a prompt to automatically prevent the user from continuing to access. How to judge whether a website has malicious content or belong to a phishing website, Apple does not have such a service, so the solution is mainly provided by other companies. A few days ago, users found that fraudulent URL warnings were provided by Google and Tencent. The information accessed by users was also provided to Google and Tencent.

crash ios devices

Apple clearly stated in the fraudulent URL warning that the Safari browser will automatically send the website to Google and Tencent for security checks before the user visits the website. The service provided by Google is called Google Safe Browsing. This service is actually integrated into Google Chrome to provide security suggestions before users visit the website.

Tencent Safe Browsing is actually the Tencent Website Security Center. This service is integrated into Tencent’s various services. It detects malicious websites and automatically blocks access. So whether it’s Apple’s fraudulent URL warning or Google and Tencent’s secure browsing, it’s essentially a URL security recommendation and therefore doesn’t have much of a problem. However, Apple‘s privacy statement also mentions that “a secure browsing provider may also record your IP address “, that is, both the IP address and the URL may be recorded.

If you just send the URL for a security check, it may not be a big problem, but it seems a bit unreasonable to provide the user’s IP address and URL. After all, Google and Tencent can judge the user’s interest based on the URL visited by the user, and perhaps use the data to push more accurate advertisements to the user.

Via: Engadget