{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,23]],"date-time":"2025-10-23T17:14:53Z","timestamp":1761239693501,"version":"build-2065373602"},"publisher-location":"New York, NY, USA","reference-count":68,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,10,27]]},"DOI":"10.1145\/3704413.3764416","type":"proceedings-article","created":{"date-parts":[[2025,10,23]],"date-time":"2025-10-23T17:08:23Z","timestamp":1761239303000},"page":"351-360","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Privacy Promises Unmasked: A Comprehensive Study of Privacy Proxies for the Masses"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-3687-6744","authenticated-orcid":false,"given":"Heiko","family":"Kiesel","sequence":"first","affiliation":[{"name":"Hasso Plattner Institute, University of Potsdam, Potsdam, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-4341-2808","authenticated-orcid":false,"given":"Jiska","family":"Classen","sequence":"additional","affiliation":[{"name":"Hasso Plattner Institute, University of Potsdam, Potsdam, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,10,23]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/CCST.2017.8167801"},{"key":"e_1_3_2_1_2_1","unstructured":"Apple. 2018. Apple PKI - Apple. https:\/\/www.apple.com\/certificateauthority\/"},{"key":"e_1_3_2_1_3_1","unstructured":"Apple. 2021. iCloud Private Relay Overview. https:\/\/www.apple.com\/icloud\/docs\/iCloud_Private_Relay_Overview_Dec2021.pdf"},{"key":"e_1_3_2_1_4_1","unstructured":"Apple. 2024. Using VPN on Apple Devices. https:\/\/it-training.apple.com\/tutorials\/deployment\/dm165\/"},{"key":"e_1_3_2_1_5_1","unstructured":"Apple. 2024. View the information stored in a keychain on Mac. https:\/\/support.apple.com\/en-gb\/guide\/keychain-access\/kyca1085\/mac"},{"key":"e_1_3_2_1_6_1","unstructured":"Apple. 2025. Apple Platform Security Guide. https:\/\/help.apple.com\/pdf\/security\/en_US\/apple-platform-security-guide.pdf"},{"key":"e_1_3_2_1_7_1","unstructured":"Apple. 2025. iCloud+ plans and pricing. https:\/\/support.apple.com\/en-gb\/HT201238"},{"key":"e_1_3_2_1_8_1","unstructured":"Apple. 2025. Prepare your network or web server for iCloud Private Relay. https:\/\/developer.apple.com\/icloud\/prepare-your-network-for-icloud-private-relay\/"},{"key":"e_1_3_2_1_9_1","unstructured":"Apple. 2025. Private Cloud Compute Security Guide. https:\/\/security.apple.com\/documentation\/private-cloud-compute"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"crossref","unstructured":"Lukas Arnold Matthias Hollick and Jiska Classen. 2024. Catch You Cause I Can: Busting Rogue Base Stations using CellGuard and the Apple Cell Location Database. In RAID.","DOI":"10.1145\/3678890.3678898"},{"key":"e_1_3_2_1_11_1","volume-title":"Secure IT Systems","author":"Bui Thanh","unstructured":"Thanh Bui, Siddharth Rao, Markku Antikainen, and Tuomas Aura. 2019. Client-Side Vulnerabilities in Commercial VPNs. In Secure IT Systems. Springer International Publishing."},{"key":"e_1_3_2_1_12_1","volume-title":"A Deep Dive into the Accuracy of IP Geolocation Databases and its Impact on Online Advertising. Transactions on Mobile Computing","author":"Gramaglia Patricia","year":"2023","unstructured":"Callejo, Patricia and Gramaglia, Marco and Cuevas, Rub\u00e9n and Cuevas, \u00c1ngel. 2023. A Deep Dive into the Accuracy of IP Geolocation Databases and its Impact on Online Advertising. Transactions on Mobile Computing (2023)."},{"key":"e_1_3_2_1_13_1","unstructured":"Chiara Castro. 2024. Facebook's Onavo VPN used to wiretap competitor data court filings reveal. https:\/\/www.techradar.com\/computing\/cyber-security\/facebooks-onavo-vpn-used-to-wiretap-competitor-data-court-filings-reveal"},{"key":"e_1_3_2_1_14_1","volume-title":"Technical Report RFC9578.","author":"Celi S.","year":"2024","unstructured":"S. Celi, A. Davidson, S. Valdez, and C. A. Wood. 2024. Privacy Pass Issuance Protocols. Technical Report RFC9578."},{"key":"e_1_3_2_1_15_1","unstructured":"Bryan Clark. 2017. PureVPN's 'non-existent' logs used to track arrest alleged internet stalker. https:\/\/thenextweb.com\/news\/purevpns-non-existent-logs-used-to-track-arrest-alleged-internet-stalker"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"crossref","unstructured":"Jiska Classen Alexander Heinrich Robert Reith and Matthias Hollick. 2022. Evil Never Sleeps: When Wireless Malware Stays On after Turning Off iPhones. In WiSec. ACM.","DOI":"10.1145\/3507657.3528547"},{"key":"e_1_3_2_1_17_1","unstructured":"Cloudflare. 2024. Privacy Pass Issuance Protocols with Public Metadata. https:\/\/blog.cloudflare.com\/privacy-pass-standard"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","unstructured":"Frank Denis. 2024. Blind RSA signatures. https:\/\/github.com\/jedisct1\/c-blind-rsa-signatures\/","DOI":"10.17487\/RFC9474"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"crossref","unstructured":"Frank Denis Frederic Jacobs and Christopher A. Wood. 2023. RSA Blind Signatures. Technical Report RFC9497.","DOI":"10.17487\/RFC9474"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251375.1251396"},{"key":"e_1_3_2_1_21_1","unstructured":"Electronic Frontier Foundation. 2024. How HTTPS and Tor Work Together to Protect Your Anonymity and Privacy. https:\/\/tor-https.eff.org\/"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243803"},{"key":"e_1_3_2_1_23_1","unstructured":"Geonode. 2024. Free proxy list. https:\/\/geonode.com\/free-proxy-list"},{"key":"e_1_3_2_1_24_1","volume-title":"Feature: IP Protection. https:\/\/chromestatus.com\/feature\/5111460239245312","year":"2024","unstructured":"Google. 2024. Feature: IP Protection. https:\/\/chromestatus.com\/feature\/5111460239245312"},{"key":"e_1_3_2_1_25_1","unstructured":"Google. 2024. IP Protection (formerly known as Gnatcatcher). https:\/\/github.com\/GoogleChrome\/ip-protection"},{"key":"e_1_3_2_1_26_1","unstructured":"Google. 2024. IP Protection in Chromium Source Code. https:\/\/github.com\/chromium\/chromium\/tree\/main\/components\/ip_protection"},{"key":"e_1_3_2_1_27_1","unstructured":"Google. 2024. Protocol Buffers Documentation. https:\/\/protobuf.dev\/"},{"key":"e_1_3_2_1_28_1","unstructured":"Google. 2024. The Chromium Projects. https:\/\/www.chromium.org\/chromium-projects\/"},{"key":"e_1_3_2_1_29_1","volume-title":"Exclusive: Apple's Craig Federighi on WWDC's new privacy features. https:\/\/fastcompany.com\/90643627\/apple-privacy-wwdc-private-relay-vpn-icloud-plus-macos-monterey","author":"Grothaus Michael","year":"2021","unstructured":"Michael Grothaus. 2021. Exclusive: Apple's Craig Federighi on WWDC's new privacy features. https:\/\/fastcompany.com\/90643627\/apple-privacy-wwdc-private-relay-vpn-icloud-plus-macos-monterey"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"crossref","unstructured":"Dennis Heinze Jiska Classen and Felix Rohrbach. 2020. MagicPairing: Apple's Take on Securing Bluetooth Peripherals. In WiSec. ACM.","DOI":"10.1145\/3395351.3399343"},{"key":"e_1_3_2_1_31_1","unstructured":"IETF. 2024. Privacy Pass Issuance Protocols with Public Metadata. https:\/\/datatracker.ietf.org\/doc\/draft-hendrickson-privacypass-public-metadata\/"},{"key":"e_1_3_2_1_32_1","volume-title":"An Analysis of the Privacy and Security Risks of Android VPN Permission-enabled Apps. In Internet Measurement Conference. ACM.","author":"Ikram Muhammad","year":"2016","unstructured":"Muhammad Ikram, Narseo Vallina-Rodriguez, Suranga Seneviratne, Mohamed Ali Kaafar, and Vern Paxson. 2016. An Analysis of the Privacy and Security Risks of Android VPN Permission-enabled Apps. In Internet Measurement Conference. ACM."},{"key":"e_1_3_2_1_33_1","unstructured":"Jana Iyengar. 2022. Trusted services for a privacy-preserving internet: iCloud Private Relay and what it means for customers. https:\/\/www.fastly.com\/blog\/icloud-private-relay-and-a-privacy-preserving-internet\/"},{"key":"e_1_3_2_1_34_1","volume":"201","author":"Jones M.","unstructured":"M. Jones and J. Hildebrand. 2015. JSON Web Encryption (JWE). Technical Report RFC7516.","journal-title":"J. Hildebrand."},{"key":"e_1_3_2_1_35_1","volume-title":"Jha","author":"Karunanayake Ishan","year":"2021","unstructured":"Ishan Karunanayake, Nadeem Ahmed, Robert Malaney, Rafiqul Islam, and Sanjay K. Jha. 2021. De-Anonymisation Attacks on Tor: A Survey. Communications Surveys and Tutorials (2021)."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"crossref","unstructured":"Eric Kinnear Patrick McManus Tommy Pauly Tanya Verma and Christopher A. Wood. 2022. Oblivious DNS over HTTPS. Technical Report RFC9230.","DOI":"10.17487\/RFC9230"},{"key":"e_1_3_2_1_37_1","volume-title":"Technical Report RFC8805.","author":"Kline E.","year":"2020","unstructured":"E. Kline, K. Duleba, Z. Szamonek, S. Moser, and W. Kumari. 2020. A Format for Self-Published IP Geolocation Feeds. Technical Report RFC8805."},{"key":"e_1_3_2_1_38_1","unstructured":"Kit Knox. 2022. Powering and Protecting Online Privacy: iCloud Private Relay and Information for Akamai Customers. https:\/\/www.akamai.com\/blog\/cloud\/powering-and-protecting-online-privacy-icloud-private-relay"},{"key":"e_1_3_2_1_39_1","volume-title":"Computer Security \u2013 ESORICS","author":"Kr\u00f6ll Tobias","year":"2021","unstructured":"Tobias Kr\u00f6ll, Stephan Kleber, Frank Kargl, Matthias Hollick, and Jiska Classen. 2021. ARIstoteles \u2013 Dissecting Apple's Baseband Interface. In Computer Security \u2013 ESORICS 2021. Springer International Publishing, Cham."},{"key":"e_1_3_2_1_40_1","unstructured":"Rustam Lalkaka. 2022. iCloud Private Relay: information for Cloudflare customers. https:\/\/blog.cloudflare.com\/icloud-private-relay\/"},{"key":"e_1_3_2_1_41_1","unstructured":"Michael Levin and Josh Lowitz. 2024. iCloud Storage Remains Apple's Most Popular Service. https:\/\/cirpapple.substack.com\/p\/icloud-storage-remains-applesmost"},{"key":"e_1_3_2_1_42_1","volume-title":"Siena Anstis, and Ron Deibert.","author":"Marczak Bill","year":"2023","unstructured":"Bill Marczak, John Scott-Railton, Daniel Roethlisberger, Bahr Abdul Razzak, Siena Anstis, and Ron Deibert. 2023. Predator in the Wires: Ahmed Eltantawy Targeted with Predator Spyware After Announcing Presidential Ambitions. https:\/\/citizenlab.ca\/2023\/09\/predator-in-the-wires-ahmed-eltantawy-targeted-with-predator-spyware-after-announcing-presidential-ambitions"},{"key":"e_1_3_2_1_43_1","unstructured":"Joshua J McIntyre. 2010. Balancing Expectations of Online Privacy: Why Internet Protocol (IP) Addresses Should Be Protected as Personally Identifiable Information. DePaul L. Rev. 60 (2010). https:\/\/via.library.depaul.edu\/law-review\/vol60\/iss3\/7"},{"key":"e_1_3_2_1_44_1","unstructured":"Microsoft. 2024. Connect to a VPN in Windows. https:\/\/support.microsoft.com\/en-us\/windows\/connect-to-a-vpn-in-windows-3d29aeb1-f497-f6b7-7633-115722c1009c"},{"key":"e_1_3_2_1_45_1","unstructured":"Microsoft. 2024. Edge Secure Network VPN. https:\/\/www.microsoft.com\/en-us\/edge\/features\/edge-secure-network-vpn"},{"key":"e_1_3_2_1_46_1","unstructured":"Sergey Mostsevenko. 2021. iOS 15 iCloud Private Relay Vulnerability Identified. https:\/\/fingerprint.com\/blog\/ios15-icloud-private-relay-vulnerability\/"},{"key":"e_1_3_2_1_47_1","unstructured":"Ivan Nikulin. 2023. Oxy is Cloudflare's Rust-based next generation proxy framework. https:\/\/blog.cloudflare.com\/introducing-oxy"},{"key":"e_1_3_2_1_48_1","unstructured":"OxyLabs. 2024. Residential Proxies. https:\/\/oxylabs.io\/products\/residential-proxy-pool"},{"key":"e_1_3_2_1_49_1","unstructured":"The Chromium Projects. 2024. How to capture a NetLog dump. https:\/\/www.chromium.org\/for-testers\/providing-network-details\/"},{"key":"e_1_3_2_1_50_1","unstructured":"ProxyNova. 2024. Proxy Anonymity Levels. https:\/\/www.proxynova.com\/proxy-articles\/proxy-anonymity-levels-explained\/"},{"key":"e_1_3_2_1_51_1","unstructured":"Cooper Quintin. 2014. Tor Is For Everyone: Why You Should Use Tor. https:\/\/www.eff.org\/deeplinks\/2014\/06\/why-you-should-use-tor Electronic Frontier Foundation."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"crossref","unstructured":"Reethika Ramesh Leonid Evdokimov Diwen Xue and Roya Ensafi. 2022. VPNalyzer: systematic investigation of the VPN ecosystem. In Network and Distributed System Security.","DOI":"10.14722\/ndss.2022.24285"},{"key":"e_1_3_2_1_53_1","volume-title":"32nd USENIX Security Symposium.","author":"Ramesh Reethika","year":"2023","unstructured":"Reethika Ramesh, Anjali Vyas, and Roya Ensafi. 2023. \"All of them claim to be the best\": Multi-perspective study of VPN users and VPN providers. In 32nd USENIX Security Symposium."},{"key":"e_1_3_2_1_54_1","volume-title":"Very Pwnable Network: Cisco AnyConnect Security Analysis. In Conference on Communications and Network Security (CNS).","author":"Roitburd Gerbert","year":"2021","unstructured":"Gerbert Roitburd, Matthias Ortmann, Matthias Hollick, and Jiska Classen. 2021. Very Pwnable Network: Cisco AnyConnect Security Analysis. In Conference on Communications and Network Security (CNS)."},{"key":"e_1_3_2_1_55_1","unstructured":"Kelum Sampath. 2024. What is a WebRTC Leak? How to Prevent Them. https:\/\/meetrix.io\/articles\/what-are-webrtc-leaks-and-how-to-prevent-them\/"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"crossref","unstructured":"Patrick Sattler Juliane Aulbach Johannes Zirngibl and Georg Carle. 2022. Towards a Tectonic Traffic Shift? Investigating Apple's New Relay Network. In IMC. ACM.","DOI":"10.1145\/3517745.3561426"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"crossref","unstructured":"David Schinazi. 2022. Proxying UDP in HTTP. Technical Report RFC9298.","DOI":"10.17487\/RFC9298"},{"key":"e_1_3_2_1_58_1","unstructured":"David Schinazi. 2025. The MASQUE Proxy. Internet-Draft draft-schinazi-masque-proxy-05. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/draft-schinazi-masque-proxy\/05\/ Work in Progress."},{"key":"e_1_3_2_1_59_1","unstructured":"smartproxy. 2024. The Different Types of Proxies Explained. https:\/\/proxyway.com\/guides\/types-of-proxies"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2022-0040"},{"key":"e_1_3_2_1_61_1","volume-title":"24th USENIX Security Symposium (USENIX Security 15)","author":"Sun Yixin","year":"2015","unstructured":"Yixin Sun, Anne Edmundson, Laurent Vanbever, Oscar Li, Jennifer Rexford, Mung Chiang, and Prateek Mittal. 2015. {RAPTOR}: Routing attacks on privacy in tor. In 24th USENIX Security Symposium (USENIX Security 15). 271\u2013286."},{"key":"e_1_3_2_1_62_1","volume-title":"Tor Project: Overview. https:\/\/2019.www.torproject.org\/about\/overview.html.en","author":"Project The Tor","year":"2015","unstructured":"The Tor Project. 2015. Tor Project: Overview. https:\/\/2019.www.torproject.org\/about\/overview.html.en"},{"key":"e_1_3_2_1_63_1","volume-title":"Technical Report RFC9113.","author":"Thomson M.","year":"2022","unstructured":"M. Thomson and C. Benfield. 2022. HTTP\/2. Technical Report RFC9113."},{"key":"e_1_3_2_1_64_1","volume-title":"Passive and Active Measurement","author":"Trevisan Martino","unstructured":"Martino Trevisan, Idilio Drago, Paul Schmitt, and Francesco Bronzino. 2023. Measuring the Performance of iCloud Private Relay. In Passive and Active Measurement. Springer Nature Switzerland."},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"crossref","unstructured":"Giorgos Tsirantonakis Panagiotis Ilia Sotiris Ioannidis Elias Athanasopoulos and Michalis Polychronakis. 2018. A Large-scale Analysis of Content Modification by Open HTTP Proxies.","DOI":"10.14722\/ndss.2018.23244"},{"key":"e_1_3_2_1_66_1","unstructured":"The Apple Wiki. 2020. DSID. https:\/\/theapplewiki.com\/wiki\/DSID"},{"key":"e_1_3_2_1_67_1","unstructured":"Jan Wildeboer. 2025. Botnet Part 2: The Web is Broken. https:\/\/jan.wildeboer.net\/2025\/04\/Web-is-Broken-Botnet-Part-2\/"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"crossref","unstructured":"Ali Zohaib Jade Sheffey and Amir Houmansadr. 2023. Investigating Traffic Analysis Attacks on Apple iCloud Private Relay. In Asia CCS. ACM.","DOI":"10.1145\/3579856.3595793"}],"event":{"name":"MobiHoc '25: Twenty-sixth International Symposium on Theory, Algorithmic Foundations, and Protocol Design for Mobile Networks and Mobile Computing","location":"Rice University Houston TX USA","acronym":"MobiHoc '25","sponsor":["SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing"]},"container-title":["Proceedings of the Twenty-sixth International Symposium on Theory, Algorithmic Foundations, and Protocol Design for Mobile Networks and Mobile Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3704413.3764416","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,23]],"date-time":"2025-10-23T17:10:54Z","timestamp":1761239454000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3704413.3764416"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,23]]},"references-count":68,"alternative-id":["10.1145\/3704413.3764416","10.1145\/3704413"],"URL":"https:\/\/doi.org\/10.1145\/3704413.3764416","relation":{},"subject":[],"published":{"date-parts":[[2025,10,23]]},"assertion":[{"value":"2025-10-23","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}